Vanta Stealer is a Python‑based, cross‑platform information stealer that uses layered PyArmor obfuscation on top of a PyInstaller‑packed executable to harvest browser passwords.

Este post fue publicado en inglés hace unos días en LAB52, otro de los blogs de S2GRUPO. El GRU ha desarrollado una compleja estructura PSYOP en los distritos militares rusos. Las unidades 03126 (distrito de Leningrado), 03138 (distrito Central), 03128 (distrito…

La Oficina de Revisión de Ciberseguridad de China ha confirmado este jueves que ha lanzado una revisión...

Vortex Market is a classic wallet escrow Dark Web marketplace with roughly 6,700 listings across narcotics, fraud, malware, and hacking.

España se sitúa en el puesto número diez en ciberataques, según el mapa interactivo en tiempo real...

Microsoft Defender’s new automatic device isolation capability has emerged as a decisive control against modern ransomware intrusions that abuse legitimate Windows binaries.

Artificial intelligence is breaking a long-standing model within many organizations.

UNC6671 uses fake IT helpdesk calls to steal Microsoft 365 and Okta session tokens for corporate data theft and extortion.

Microsoft Threat Intelligence has identified a new ransomware campaign attributed to the financially motivated threat actor Storm-1175 that began deploying a previously undocumented ransomware strain, StormEncryptor, on August 2, 2026.

Semana del 26 Octubre del 2026

TLP:WHITE

NIVEL ANALÍTICO: EJECUTIVO

Discover how Kimwolf v7 targets Android IoT devices with HTTP/2 DDoS fingerprinting, Ethereum ENS C2 resolution and Tor backup routing.

DeadLock ransomware uses double extortion, encrypting files and threatening to leak data after targeting 80+ victims worldwide.

Microsoft Threat Intelligence examines DeadLock ransomware, an emerging financially motivated operation distinguished by its use of decentralized infrastructure to support victim communications, negotiations, and data leak operations alongside double extortion…

Play ransomware is using a familiar Windows-administration disguise to reduce suspicion during intrusions: a custom service binary named PSexesvc.exe.