Threat Intelligence Archives | Page 2 of 8 | Detect Diagnose Defeat Cyber Threat

Category: Threat Intelligence

This Weekly Threat Advisory highlights the latest Ransomware, Malware, CVEs, Threat Actors, and Phishing Kits targeting organizations globally.

Emerging malware strains and ransomware groups are leveraging advanced exploitation techniques to bypass security defenses.

Newly disclosed CVEs are actively being weaponized by threat actors, increasing the risk of targeted attacks.

Phishing kits are evolving, enabling large-scale credential theft and unauthorized access to critical systems.

Security teams must stay vigilant, patch vulnerabilities, enhance detection, and strengthen cyber defense strategies against these evolving threats.

HackForLab Weekly Threat Advisory · Jun 29 – Jul 5 2026 · command-center briefing cover · SITREP 026·27 · 1,524 unique IOCs · 1,129 high-severity · 64 clusters · 5 named APTs · 5 headline cards: AsyncRAT surge, TONResolver novel blockchain-resolved C2, trust-anchor verification-page phishing, APT week UNC1151 APT36 TeamPCP Lazarus BitterAPT, Anubis and The Gentlemen ransomware · midnight navy with cyan amber emerald coral palette

Weekly Threat Advisory: 5 APTs, 200 RATs, 74% High-Severity — The Week the C2 Flood Went Quiet (Jun 29 – Jul 5, 2026)

⚠ THREAT LEVEL: SEVERE · SITREP 026·27 · June 29 – July 5, 2026 The C2-flood feeds went quiet this...

HackForLab Weekly Threat Advisory · June 22-28 2026 · editorial bulletin cover · The State of the Threat · 54,820 observations · 87 clusters · 632 high-severity · 7 named APTs · 5 story cards: APT Week (Gamaredon Turla MustangPanda CL-STA-1062 Silent Lynx), DragonForce Full Kill Chain, Messaging Weaponised (WhatsApp VBScript Campaign), Supply Chain Surge (GhostShell Malicious npm Browser ad-blocker), New RAT on the Block (ModeloRAT)

Weekly Threat Advisory: APT Surge, Ransomware Full-Pivot, Messaging Weaponised — June 22-28, 2026

WEEKLY THREAT ADVISORY · EDITION №026·26 · JUNE 22 – 28, 2026 This was an APT week. Four named state-aligned...

Practitioner reference cover · Indicators of Compromise and Threat Intelligence · 6 framework cards: Pyramid of Pain, IOC Standards (STIX TAXII OpenIOC MISP), Pivoting Tradecraft (passive DNS WHOIS JARM JA4 cert), Diamond Model, TI Lifecycle + F3EAD, Detection Engineering (Sigma YARA ATT&CK Navigator SOAR) · framework chip strip: Pyramid of Pain · Diamond Model · Kill Chain · ATT&CK · STIX TAXII · Sigma YARA · F3EAD

Indicators of Compromise and Threat Intelligence: A Practitioner Reference

PRACTITIONER REFERENCE · THREAT INTELLIGENCE & DETECTION ENGINEERING · v2 A working analyst's reference. Twenty sections, sixteen frameworks — the...

HACKFORLAB Weekly Threat Advisory · June 15-21, 2026 · 55,480 indicator observations across 89 adversary clusters · radar showing intelligence graph with multi-pivot locked cluster · Rhysida-Interlock 219 IOCs, ClickFix 215 IOCs, JetBrains plugin supply chain attack, AI platform abuse, APT37 and UNC6508 active

Weekly Threat Advisory: Cluster Analysis & Top IOCs, June 15 – 21, 2026

WEEKLY THREAT ADVISORY · ADVISORY 026-25 · JUNE 15 – 21, 2026 The catalogue produced 55,480 indicator observations across 89...

The AWS Threat Hunting Library — 7 hunts every cloud SOC should run · HackForLab AWS Threat Hunting series hub

The Complete AWS Threat Hunting Library: 27 Cloud Hunts, 7 Flagship Playbooks, and the Full Archive (2026)

⚙ AWS THREAT HUNTING · CORNERSTONE LIBRARY · 2026 EDITION The Amazon Web Services attack surface is broader than most...

HACKFORALB successfully completed threat hunting for following attack…

DNS Reconnaissance, Domain Generation Algorithm (DGA), Robotic Pattern Detection, DNS Shadowing , Fast Flux DNS , Beaconing , Phishing , APT , Lateral Movement , Browser Compromised , DNS Amplification , DNS Tunneling , Skeleton key Malware , Advance Persistent Threats, Low and Slow attacks , DoS, Watering Hole Attack Detection, Weh Shell , DNS Water Torch Attack , Intrusion Detection, Cookie visibility and theft, User login Session hijacking, Broken Trust, Pass the Hash, Session fixation, Honey Token account suspicious activities, Data Snooping / Data aggregation, Cross Channel Data Egress, Banking fraud detection, Chopper Web shell

Category: Threat Intelligence

Weekly Threat Advisory: Top Cyber Adversaries May 24 – 31, 2026

Weekly Threat Advisory: Top Cyber Adversaries May 18 – 24, 2026

Weekly Threat Advisory: Top Cyber Adversaries May 11 – 17, 2026

Weekly Threat Advisory: Top Cyber Adversaries May 04 – 10, 2026

Weekly Threat Advisory: The Most Active Cyber Adversaries October 13 – October 19, 2025

Recent Posts

Hackforlab Category

FaceBook Page

SIEM | UEBA

GridView List Posts Widget

Weekly Threat Advisory: 5 APTs, 200 RATs, 74% High-Severity — The Week the C2 Flood Went Quiet (Jun 29 – Jul 5, 2026)

Weekly Threat Advisory: APT Surge, Ransomware Full-Pivot, Messaging Weaponised — June 22-28, 2026

Indicators of Compromise and Threat Intelligence: A Practitioner Reference

Weekly Threat Advisory: Cluster Analysis & Top IOCs, June 15 – 21, 2026

The Complete AWS Threat Hunting Library: 27 Cloud Hunts, 7 Flagship Playbooks, and the Full Archive (2026)

Cyber Threat Attacks / Hunting

Cyber Deception

FOLLOW US

CYBER THREAT CATEGORIES

Top Cyber Security Articles

Threat Hunting Scenarios