DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic
Ravie LakshmananJun 18, 2026Remote Access Trojan / Ransomware
Threat actors associated with the DragonForce ransomware have been observed using a custom Go-based remote access trojan (RAT) called Backdoor.Turn to conceal...
INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023
Ravie LakshmananJun 18, 2026Vulnerability / Enterprise Security
Cybersecurity researchers have charted the evolution of INC from an nascent ransomware-as-a-service (RaaS) operation to one of the most prolific cybercrime groups in...
ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories
Ravie LakshmananJun 18, 2026Hacking News / Cybersecurity News
The internet did not break this week. It got used exactly as designed, which is worse.
Searches were siphoned through shady browser add-ons....
ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures
Cybersecurity researchers have flagged multiple ClickFix campaigns that deliver three malware loaders called BabaDeda Loader, Lorem Ipsum Loader, and Potemkin, per independent reports from Morphisec, BlueVoyant, and Huntress, respectively.
Attacks...
Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs
Authorities in Europe have disrupted AudiA6, a cryptocurrency laundering service used by ransomware gangs and cybercriminal networks.
Europol, in a statement issued Thursday, said the dismantling of AudiA6 cut off...
ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New...
Ravie LakshmananJun 11, 2026Hacking News / Cybersecurity News
It's been one of those weeks. You expect the usual noise: recycled malware, sloppy attacks, another easy target getting hit. Instead, there's...
The Gentlemen Ransomware Claims 478 Victims, Can Spread Like a Worm
Ravie LakshmananJun 11, 2026Cybercrime / Ransomware
A new analysis of The Gentlemen operation has revealed that the financially motivated threat group initially operated as an affiliate responsible for conducting double...
Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code
Ravie LakshmananJun 09, 2026Vulnerability / Backup Software
Veeam has released security patches to address a critical flaw in its Backup & Replication software that could result in remote code execution.
Tracked...
UNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion Campaign
Cybersecurity researchers have disclosed details of a financially motivated data theft extortion campaign that has targeted dozens of organizations across professional, legal, and financial services in the U.S. between...
Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups
Ravie LakshmananJun 08, 2026Vulnerability / Network Security
Check Point has warned of active exploitation of a critical vulnerability impacting Remote Access VPN and Mobile Access deployments that are configured to...
