Bulletins d'actualité

Classification

TLP:WHITEC0

Offensive Security’s Exploit Database

ToddyCat: your hidden email assistant. Part 2 An in-depth analysis of Umbrij, a new tool used by the ToddyCat APT group to compromise corporate email communications in Gmail. The attack targeted OAuth authorization tokens, allowing threat actors to gain access to Google services.

The Gentlemen are knocking: сustom backdoors and evolving tactics Kaspersky researchers analyze incidents related to The Gentlemen RaaS group, disclose their tools and TTPs, and find a new ransomware variant.

Inside the 2026 SMB threat landscape: From phishing and scams to fake AI tools Kaspersky researchers analyze the threat landscape for SMBs in 2026: the rise of attacks involving fake AI tools, phishing schemes, and data sold on the dark web.

StrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoader Kaspersky researchers analyze a new global campaign dubbed StrikeShark that delivers Cobalt Strike Beacon via custom SharkLoader malware.

A VBScript campaign distributed through WhatsApp deploying RMM software A Kaspersky researcher analyzes a global malicious campaign that distributes VBS scripts via WhatsApp delivering a UEMS RMM agent through a multi-stage infection chain.