Weekly Threat Advisory: Top Cyber Threats from August 25- August 31 2025
🛡️ Weekly Threat Advisory – Critical Trends Shaping the Cybersecurity Landscape
| NAME_OF_ADVERSARY | ADVERSARY_TYPE | SEVERITY | NUMBER_OF_IOC | IOC_TYPE_COUNT_SUMMARY |
| Chinese state-sponsored APT | Threat Actor | High | 92 | IP–>86 | HASH–>6 |
| UNC6384 | Threat Actor | High | 14 | IP–>2 | HASH–>7 | URL–>5 |
| Silver Fox | Threat Actor | High | 18 | IP–>5 | HASH–>13 |
| APT-Q-1 | Threat Actor | High | 23 | IP–>3 | DOMAIN–>2 | HASH–>13 | URL–>5 |
| Cobalt Strike | Threat Actor | High | 80 | IP–>17 | DOMAIN–>3 | HASH–>60 |
| NightSpire | Ransomware | High | 2 | HASH–>2 |
| PromptLock | Ransomware | High | 6 | HASH–>6 |
| Cephalus | Ransomware | High | 5 | HASH–>2 | OTHERS–>3 |
| J | Ransomware | High | 13 | IP–>2 | DOMAIN–>3 | HASH–>6 | URL–>1 | OTHERS–>1 |
| Underground Ransomware | Ransomware | High | 2 | HASH–>2 |
| Salty 2FA | Phishing Kit | Medium | 13 | IP–>4 | DOMAIN–>4 | URL–>4 | EMAIL–>1 |
| SEG bypass Phishing Kit | Phishing Kit | Medium | 7 | DOMAIN–>7 |
| Fake digital signature | Phishing Campaign | Low | 11 | HASH–>8 | URL–>3 |
| AI Website Creation App | Phishing Campaign | Low | 9 | IP–>1 | URL–>8 |
| recruitment invitations | Phishing Campaign | Low | 8 | DOMAIN–>8 |
| UpCrypter | Phishing Campaign | Low | 29 | DOMAIN–>14 | HASH–>6 | URL–>9 |
| PRC_APT_Router_Level_Global_Espionage_Campaign | Malware_campaign | High | 95 | IP–>89 | HASH–>6 |
| Malicious Screen Connect Campaign | Malware_campaign | High | 32 | IP–>1 | HASH–>16 | URL–>15 |
| ShadowSilk | Malware_campaign | High | 66 | IP–>15 | DOMAIN–>16 | HASH–>31 | URL–>4 |
| TAOTH campaign | Malware_campaign | High | 47 | IP–>5 | DOMAIN–>6 | HASH–>17 | URL–>19 |
| Taspen Malware Campaign | Malware_campaign | High | 7 | IP–>1 | DOMAIN–>2 | HASH–>4 |
| AppSuite PDF Editor | Malware | High | 16 | HASH–>7 | URL–>9 |
| QuirkyLoader | Malware | High | 27 | IP–>3 | DOMAIN–>2 | HASH–>22 |
| SSH tool PuTTY | Malware | High | 38 | IP–>5 | DOMAIN–>13 | HASH–>12 | URL–>8 |
| TINKYWINKEY KEYLOGGER | Malware | High | 3 | HASH–>3 |
| FileFix | Malware | High | 119 | IP–>4 | DOMAIN–>41 | HASH–>10 | URL–>64 |
| Gayfemboy | Malware | High | 62 | IP–>6 | DOMAIN–>5 | HASH–>51 |
| Hook v3 | Malware | High | 11 | HASH–>9 | URL–>2 |
| Mystrodx | Malware | High | 17 | IP–>5 | DOMAIN–>1 | HASH–>10 | URL–>1 |
| PipeMagic backdoor | Malware | High | 7 | DOMAIN–>1 | HASH–>6 |
Happy Threat Hunting
