Tag: APT

54,763 unique indicators across 107 tracked clusters this cycle. Dominant signal: framework-C2 infrastructure surge with 25+ concentrated /24 subnet anchors. Emerging supply-chain wave — fake npm packages, fake installers, developer-ecosystem targeting. macOS malware surge across three concurrent families. Three ransomware operators active. Iranian-linked APT clusters continue. Full ATT&CK-per-tactic pressure roll-up, four production-ready Sigma rules, subnet anchors, top IOCs per type.

Weekly Threat Advisory | DPRK | The Gentlemen Ransomware | FrostyNeighbor | FamousSparrow | CVE-2026-41940 | EtherRAT

Weekly threat intel for 04–10 May 2026: 9,366 IOCs, 114 adversaries — Mirai, Clearfake, DPRK, ScarCruft, Kimsuky, MuddyWater & more.