📃Title: Sniper's Nest: From Brand Impersonation to Browser Hijacking and CPA Fraud
📅Date: 2026-06-11
🔗References:
https://www.group-ib.com/blog/inside-sniperdz-phaas-ecosystem/

🔖Rectifyq Taxonomies:
Relevancy: 🔵 Potentially Relevant
Category: ⚔ Threat
• mitre-att&ck="none-from-src"
• mitre-att&ck="from-OTX"
• sub-category="tool-profile"
• target="broad-based"
• TA-category="Cybercrime"
• sub-category="infra-profile"
• no-samples-in="MalwareBazaar"
• no-samples-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
• producer="Group-IB"
• target-information="Algeria"
mitre-attack-pattern=[]

MISP event uuid: 7a3ded92-0934-49f2-956c-0623538fbdb6

📃Title: Cyber-Enabled Maritime Sanctions Evasion
📅Date: 2026-06-11
🔗References:
https://www.recordedfuture.com/research/media_12cb79eec13b6af7520af3c1ae6768c0f4b25e945.gif?width=1200&format=pjpg&optimize=medium
https://www.recordedfuture.com/research/cyber-maritime-sanctions-evasion

🔖Rectifyq Taxonomies:
Relevancy: 🔴 Highly Relevant
Category: ⚔ Threat
• mitre-att&ck="none-from-src"
• mitre-att&ck="from-OTX"
• sub-category="infra-profile"
• sub-category="campaign-analysis"
• topic="geopolitical"
• target="broad-based"
• no-samples-in="MalwareBazaar"
• no-samples-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
• producer="Recorded Future"
mitre-attack-pattern=[]

MISP event uuid: 64d4b916-e459-44a4-80d0-636de8f9c850

📃Title: Threat Actors Target FIFA World Cup 2026
📅Date: 2026-06-11
🔗References:
https://www.cloudsek.com/blog/chinese-origin-threat-actors-target-fifa-world-cup-2026

🔖Rectifyq Taxonomies:
Relevancy: 🔵 Potentially Relevant
Category: ⚔ Threat
• mitre-att&ck="none-from-src"
• mitre-att&ck="from-OTX"
• sub-category="campaign-analysis"
• TA-category="Cybercrime"
• target="broad-based"
• no-samples-in="MalwareBazaar"
• no-samples-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
• producer="CloudSEK"
• country="china"
mitre-attack-pattern=['T1557', 'T1583', 'T1539', 'T1114', 'T1566.002', 'T1586.002', 'T1583.001', 'T1589', 'T1185', 'T1557.001', 'T1589.002', 'T1584', 'T1586', 'T1590', 'T1566', 'T1110', 'T1078', 'T1589.001', 'T1598', 'T1590.001']

MISP event uuid: 1bbbb25e-72ad-415c-b7ef-5710bea4bb60

📃Title: Threat Actors Weaponize AI Hype to Deliver AsyncRAT
📅Date: 2026-06-11
🔗References:
https://www.fortinet.com/blog/threat-research/threat-actors-weaponize-ai-hype-to-deliver-asyncrat

🔖Rectifyq Taxonomies:
Relevancy: 🔵 Potentially Relevant
Category: ⚔ Threat
• mitre-att&ck="none-from-src"
• mitre-att&ck="from-OTX"
• sub-category="malware-analysis"
• sub-category="campaign-analysis"
• topic="ai"
• target="broad-based"
• no-samples-in="MalwareBazaar"
• no-samples-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
• producer="Fortinet"
• malpedia="AsyncRAT"
mitre-attack-pattern=['T1053.005', 'T1113', 'T1218.011', 'T1573.001', 'T1082', 'T1106', 'T1140', 'T1112', 'T1497', 'T1204', 'T1059.001', 'T1566', 'T1562.001', 'T1055.012', 'T1027', 'T1059.003', 'T1070.004', 'T1071.001', 'T1059.005']

MISP event uuid: a72101e4-904d-4526-b9e3-6e902513f24b

📃Title: How Lookalike Domains Exploit Human Judgment
📅Date: 2026-06-11
🔗References:
https://www.infoblox.com/blog/security/human-judgment-hacks-how-lookalike-domains-work/

🔖Rectifyq Taxonomies:
Relevancy: 🔵 Potentially Relevant
Category: ⚔ Threat
• mitre-att&ck="none-from-src"
• mitre-att&ck="from-OTX"
• sub-category="campaign-analysis"
• sub-category="report"
• target="broad-based"
• no-samples-in="MalwareBazaar"
• no-samples-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
• producer="Infoblox"
mitre-attack-pattern=['T1583', 'T1071.004', 'T1204.002', 'T1566.002', 'T1598.003', 'T1071', 'T1586.002', 'T1583.001', 'T1589', 'T1589.002', 'T1584', 'T1586', 'T1598.002', 'T1204', 'T1590', 'T1566', 'T1598', 'T1590.001', 'T1204.001', 'T1584.001']

MISP event uuid: 833736e2-fc4c-4f68-ab29-b048c427c6ee

📃Title: Affidavit in Support of Application for Criminal Complaint
📅Date: 2026-06-09
🔗References:
https://cyberscoop.com/wp-content/uploads/sites/3/2026/06/11-1.pdf

🔖Rectifyq Taxonomies:
Relevancy: 🔵 Potentially Relevant
Category: ⚔ Threat
• mitre-att&ck="none-from-src"
• mitre-att&ck="from-OTX"
• sub-category="TA-profile"
• sub-category="report"
• target="broad-based"
• topic="geopolitical"
• TA-category="APT"
• no-samples-in="MalwareBazaar"
• no-samples-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
• target-information="United States"
• threat-actor="Void Blizzard"
mitre-attack-pattern=['T1133', 'T1114', 'T1071', 'T1562', 'T1567', 'T1589', 'T1185', 'T1090', 'T1020', 'T1588.001', 'T1070', 'T1586', 'T1590', 'T1048', 'T1588.002', 'T1566', 'T1078', 'T1573', 'T1598', 'T1213']

MISP event uuid: 48a8d13e-0e7e-4d6f-8807-d4d9761dc8b5

📃Title: Defending the Digital Pitch: World Cup 2026 Cyber Threats
📅Date: 2026-06-11
🔗References:
https://www.cyberproof.com/blog/defending-the-digital-pitch-world-cup-2026-cyber-threats/

🔖Rectifyq Taxonomies:
Relevancy: 🔵 Potentially Relevant
Category: ⚔ Threat
• mitre-att&ck="none-from-src"
• mitre-att&ck="from-OTX"
• sub-category="campaign-analysis"
• target="broad-based"
• no-samples-in="MalwareBazaar"
• no-samples-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
mitre-attack-pattern=['T1557', 'T1583', 'T1539', 'T1566.002', 'T1190', 'T1583.001', 'T1589', 'T1185', 'T1588.001', 'T1586', 'T1528', 'T1204', 'T1199', 'T1566', 'T1110', 'T1078', 'T1499', 'T1598', 'T1189', 'T1498']

MISP event uuid: 1708688e-6ab1-4949-83be-1fe8e61d59e3

📃Title: World Cup 2026 Mobile Targeted Phishing: The Global Social Engineering Threat
📅Date: 2026-06-11
🔗References:
https://zimperium.com/blog/world-cup-2026-mobile-targeted-phishing-the-global-social-engineering-threat?hs_amp=true

🔖Rectifyq Taxonomies:
Relevancy: 🔵 Potentially Relevant
Category: ⚔ Threat
• mitre-att&ck="none-from-src"
• mitre-att&ck="from-OTX"
• sub-category="campaign-analysis"
• topic="mobile-attack"
• target="broad-based"
• no-samples-in="MalwareBazaar"
• no-samples-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
• producer="Zimperium"
mitre-attack-pattern=['T1539', 'T1114', 'T1566.002', 'T1598.003', 'T1566.001', 'T1586.002', 'T1608.001', 'T1583.001', 'T1589', 'T1185', 'T1056.003', 'T1589.002', 'T1608.005', 'T1528', 'T1566', 'T1056', 'T1589.001', 'T1598', 'T1204.001']

MISP event uuid: 2d22208a-0035-4f4c-8dfd-a7b056feab82

📃Title: Targets Education Sector with Oracle PeopleSoft Exploit
📅Date: 2026-06-11
🔗References:
https://cloud.google.com/blog/topics/threat-intelligence/shinyhunters-targets-education-sector-oracle-exploit

🔖Rectifyq Taxonomies:
Relevancy: 🔵 Potentially Relevant
Category: ⚔ Threat
• mitre-att&ck="from-OTX"
• sub-category="campaign-analysis"
• TA-category="Cybercrime"
• target="broad-based"
• mitre-att&ck="none-from-src"
• no-samples-in="MalwareBazaar"
• samples-found-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
• producer="Mandiant"
• target-information="United States"
• sector="Education"
• threat-actor="ShinyHunters"
mitre-attack-pattern=['T1560.001', 'T1110.001', 'T1133', 'T1069', 'T1114', 'T1036.005', 'T1021.004', 'T1190', 'T1491', 'T1505.003', 'T1083', 'T1552.001', 'T1041', 'T1059.004', 'T1078', 'T1027', 'T1486', 'T1573.002', 'T1071.001', 'T1018']

MISP event uuid: 612a10dd-f897-4556-ab31-f50a1b128318

📃Title: UNC1151/Ghostwriter phishing campaign targeting Gmail accounts
📅Date: 2026-06-12
🔗References:
https://cert.pl/en/posts/2026/06/UNC1151-gmail-campaign/

🔖Rectifyq Taxonomies:
Relevancy: 🔵 Potentially Relevant
Category: ⚔ Threat
• mitre-att&ck="none-from-src"
• mitre-att&ck="from-OTX"
• sub-category="campaign-analysis"
• TA-category="APT"
• target="broad-based"
• no-samples-in="MalwareBazaar"
• no-samples-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
• target-information="Poland"
• threat-actor="Ghostwriter"
mitre-attack-pattern=['T1566']

MISP event uuid: 5c1e7285-f735-49d8-9fcf-ef31d47b10ae

📃Title: How to defend ARM64 cloud infrastructure
📅Date: 2026-06-11
🔗References:
https://www.reversinglabs.com/blog/defend-cloud-infrastructure-itscape

🔖Rectifyq Taxonomies:
Relevancy: 🔵 Potentially Relevant
Category: 💉 Vulnerability
• mitre-att&ck="none-from-src"
• mitre-att&ck="from-OTX"
• sub-category="campaign-analysis"
• sub-category="critical-vuln"
• target="broad-based"
• topic="cloud"
• no-samples-in="MalwareBazaar"
• no-samples-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
mitre-attack-pattern=['T1592', 'T1082', 'T1005', 'T1611', 'T1610', 'T1548', 'T1059', 'T1609', 'T1204', 'T1068']

MISP event uuid: b91d23b7-24fc-4cac-87d6-d5dc6b6bfd67

📃Title: Akira, LimeWire, and the Sour Taste of Data Exfiltration
📅Date: 2026-06-12
🔗References:
https://www.huntress.com/blog/akira-ransomware-limewire-data-exfiltration

🔖Rectifyq Taxonomies:
Relevancy: 🔵 Potentially Relevant
Category: ⚔ Threat
• mitre-att&ck="none-from-src"
• mitre-att&ck="from-OTX"
• sub-category="intrusion-analysis"
• TA-category="Ransomware"
• target="targeted"
• no-samples-in="MalwareBazaar"
• no-samples-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
• producer="Huntress"
• ransomware="Akira"
mitre-attack-pattern=['T1560.001', 'T1069', 'T1074.001', 'T1087.002', 'T1082', 'T1005', 'T1140', 'T1083', 'T1497', 'T1041', 'T1562.001', 'T1078', 'T1486', 'T1567.002', 'T1018', 'T1105', 'T1021.001', 'T1490']

MISP event uuid: bb394d28-549f-4209-a897-d318fd04266f

📃Title: Interlock and Rhysida within the Ransomware Ecosystem
📅Date: 2026-06-12
🔗References:
https://www.ibm.com/think/x-force/interlock-and-rhysida-within-the-ransonware-ecosystem

🔖Rectifyq Taxonomies:
Relevancy: 🔵 Potentially Relevant
Category: ⚔ Threat
• mitre-att&ck="none-from-src"
• mitre-att&ck="from-OTX"
• sub-category="TA-profile"
• TA-category="Ransomware"
• target="broad-based"
• samples-found-in="MalwareBazaar"
• samples-found-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
• producer="IBM X-Force"
• target-information="United States"
• ransomware="interlock"
• ransomware="rhysida"
mitre-attack-pattern=['T1053.005', 'T1218.011', 'T1003', 'T1087.002', 'T1140', 'T1190', 'T1055', 'T1482', 'T1083', 'T1204', 'T1059.001', 'T1547.001', 'T1566', 'T1486', 'T1203', 'T1059.003', 'T1189', 'T1027.002', 'T1018', 'T1105', 'T1021.001', 'T1490']

MISP event uuid: 4f2a0ee4-d11b-46a6-ba6d-1f9be509076d

📃Title: How 23 Browser Extensions Silently Monetize ~758,000 Users' Searches
📅Date: 2026-06-09
🔗References:
https://malext.io/reports/SearchJack

🔖Rectifyq Taxonomies:
Relevancy: 🔵 Potentially Relevant
Category: ⚔ Threat
• mitre-att&ck="none-from-src"
• mitre-att&ck="from-OTX"
• sub-category="campaign-analysis"
• TA-category="Cybercrime"
• target="broad-based"
• no-samples-in="MalwareBazaar"
• no-samples-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
mitre-attack-pattern=['T1033', 'T1056.001', 'T1539', 'T1036.005', 'T1204.002', 'T1566.002', 'T1082', 'T1176', 'T1005', 'T1036', 'T1185', 'T1112', 'T1083', 'T1568', 'T1027', 'T1573', 'T1213', 'T1189', 'T1071.001']

MISP event uuid: c2e25435-9441-48e7-a5cc-c2a50ceff102

📃Title: Analysis of APT37 NarwhalRAT Leveraging MS-Themed Phishing and Dead-drop C2
📅Date: 2026-06-15
🔗References:
https://www.genians.co.kr/en/blog/threat_intelligence/narwhalrat

🔖Rectifyq Taxonomies:
Relevancy: ⚫ Not Relevant
Category: ⚔ Threat
• mitre-att&ck="none-from-src"
• mitre-att&ck="from-OTX"
• sub-category="intrusion-analysis"
• TA-category="APT"
• target="broad-based"
• no-samples-in="MalwareBazaar"
• no-samples-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
• threat-actor="APT37"
mitre-attack-pattern=['T1053.005', 'T1113', 'T1056.001', 'T1025', 'T1204.002', 'T1497.001', 'T1566.001', 'T1005', 'T1140', 'T1055', 'T1112', 'T1041', 'T1059.001', 'T1547.001', 'T1027', 'T1059.003', 'T1070.004', 'T1071.001', 'T1102.001']

MISP event uuid: 24638e19-caf4-4253-8ead-b7f85dda8137

📃Title: Inside OnyxC2: The New Stealer Targeting 210 Apps
📅Date: 2026-06-11
🔗References:
https://www.blackfog.com/inside-onyxc2-the-new-stealer-targeting-210-apps

🔖Rectifyq Taxonomies:
Relevancy: 🔵 Potentially Relevant
Category: ⚔ Threat
• mitre-att&ck="from-original-src"
• mitre-att&ck="from-OTX"
• sub-category="tool-profile"
• target="broad-based"
• TA-category="Cybercrime"
• samples-found-in="MalwareBazaar"
• samples-found-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
mitre-attack-pattern=['T1053.005', 'T1113', 'T1056.001', 'T1539', 'T1555.005', 'T1555.003', 'T1027.001', 'T1003.001', 'T1497', 'T1041', 'T1090.003', 'T1027', 'T1564.003', 'T1071.001', 'T1574.002']

MISP event uuid: d9262ac6-5e84-4e20-82d7-6a520239ed85

📃Title: The Devil, Eight Million Emails, and a Whole Lot of Milk | Phishing Stager Exposed
📅Date: 2026-06-15
🔗References:
https://www.huntress.com/blog/terminal-server-phishing-stager-exposed

🔖Rectifyq Taxonomies:
Relevancy: ⚫ Not Relevant
Category: ⚔ Threat
• mitre-att&ck="none-from-src"
• mitre-att&ck="from-OTX"
• sub-category="intrusion-analysis"
• target="targeted"
• no-samples-in="MalwareBazaar"
• samples-found-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
• producer="Huntress"
• target-information="United Kingdom"
• target-information="Bolivia"
mitre-attack-pattern=['T1133', 'T1114', 'T1566.002', 'T1598.003', 'T1586.002', 'T1036', 'T1185', 'T1071.003', 'T1535', 'T1589.002', 'T1090', 'T1078', 'T1027', 'T1132', 'T1189', 'T1584.004']

MISP event uuid: d5715164-f8a4-40b1-b225-96ea7a71e85e

📃Title: Travel Phishing and Cyber Attacks are Surging in 2026, Growing 122% over the last 3 years: How Cybercriminals Are Targeting Travelers in 2026
📅Date: 2026-06-15
🔗References:
https://blog.checkpoint.com/research/travel-phishing-and-cyber-attacks-are-surging-in-2026-growing-122-over-the-last-3-years-heres-what-cyber-criminals-are-actually-doing/

🔖Rectifyq Taxonomies:
Relevancy: 🔴 Highly Relevant
Category: ⚔ Threat
• mitre-att&ck="none-from-src"
• mitre-att&ck="from-OTX"
• sub-category="campaign-analysis"
• TA-category="Cybercrime"
• target="broad-based"
• no-samples-in="MalwareBazaar"
• no-samples-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
• producer="Check Point"
• target-information="Malaysia"
• target-information="Canada"
mitre-attack-pattern=['T1583', 'T1539', 'T1114', 'T1204.002', 'T1566.002', 'T1598.003', 'T1583.001', 'T1056.003', 'T1204', 'T1566', 'T1585.001', 'T1056', 'T1132', 'T1598', 'T1585', 'T1213']

MISP event uuid: be7ce1a3-06b7-40b8-baae-d4fa3adfba87

📃Title: OptinMonster supply chain attack hits 1.2 million sites
📅Date: 2026-06-13
🔗References:
https://sansec.io/research/optinmonster-supply-chain-attack

🔖Rectifyq Taxonomies:
Relevancy: 🔵 Potentially Relevant
Category: ⚔ Threat
• mitre-att&ck="none-from-src"
• mitre-att&ck="from-OTX"
• sub-category="campaign-analysis"
• topic="supply-chain"
• target="broad-based"
• no-samples-in="MalwareBazaar"
• no-samples-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
mitre-attack-pattern=['T1033', 'T1132.001', 'T1573.001', 'T1087.001', 'T1082', 'T1140', 'T1218', 'T1070.006', 'T1505.003', 'T1136.001', 'T1090.002', 'T1083', 'T1114.003', 'T1564.002', 'T1562.003', 'T1059.004', 'T1027', 'T1195.002', 'T1071.001', 'T1078.003']

MISP event uuid: f99b496b-ce4c-43ce-87f6-8024f8c36a0f

📃Title: The Package That Never Shipped: Following a USPS Smishing Kit Through DNS Data
📅Date: 2026-06-13
🔗References:
https://censys.com/blog/following-a-usps-smishing-kit-through-censys-dns-data/

🔖Rectifyq Taxonomies:
Relevancy: ⚫ Not Relevant
Category: ⚔ Threat
• mitre-att&ck="none-from-src"
• mitre-att&ck="from-OTX"
• sub-category="campaign-analysis"
• topic="mobile-attack"
• target="broad-based"
• no-samples-in="MalwareBazaar"
• no-samples-in="Tria.ge"
• action-taken="VT-comment"

🔖MISP Galaxies:
• producer="censys"
mitre-attack-pattern=['T1583', 'T1056.001', 'T1036.005', 'T1566.002', 'T1598.003', 'T1071', 'T1586.002', 'T1608.001', 'T1583.001', 'T1036', 'T1185', 'T1586', 'T1608', 'T1583.006', 'T1041', 'T1566', 'T1027', 'T1573', 'T1056', 'T1598', 'T1071.001']

MISP event uuid: 5f1db648-9b34-47fd-aa68-47e63fa3de4b