Threat Advisories:

Click, Paste, Compromise: Inside the New FileFix Campaign Hive0154 Evolves with SnakeDisk and EnhancedToneshell Backdoor HybridPetya: A Bootkit-Enabled Ransomware Threat EvilAI Malware Exploits the Trust in Artificial Intelligence kkRAT Malware Campaign Targeting Chinese-Speaking Users ZynorRAT: Go-Based Malware Taking Shape on Telegram Microsoft September 2025 Patch Tuesday Roundup The Gentlemen Ransomware: A Rising Global Cyber Threat MostereRAT: A Deep Dive into an EPL-Backed Phishing Operation Stealerium Changing the Rules of Cyber Espionage s1ngularity Nx Supply Chain Attack: AI-Driven Credential Theft & Mass Exposure GPUGate: Weaponizing Ads and GitHub to Outsmart Sandboxes Cephalus Ransomware a Wake-Up Call for Stronger Endpoint Defense Sitecore Zero-Day Powers Reconnaissance Malware TP-Link Router End-of-Service Models Exploited in Botnet Operation GhostRedirector Targets Windows Servers Globally for SEO Fraud CVE-2025-55177: WhatsApp Zero-Click Flaw Used in Targeted Campaigns Experimental AI Ransomware PromptLock Sparks Security Concerns NightSpire Ransomware Expands Reach with Aggressive Extortion Deadlines Operation HanKook Phantom: APT37’s Stealthy Espionage Campaign

Hive Force Labs: Critical Threats Affecting You This Week - 5 Minute Audio Intelligence Report

Play Count: Loading...

Partner Program

Book a Demo Threat Digest - Subscribe

January 9, 2024

Attacks, Vulnerabilities and Actors 1 January to 7 January 2024

For a detailed threat digest, download the pdf file here

Summary

HiveForce Labs has recently made several significant discoveries related to cybersecurity threats. Over the past week, we identified a total of twelve executed attacks, two instances of adversary activity, and three exploited vulnerability, highlighting the ever-present danger of cyberattacks.

Furthermore, HiveForce Labs uncovered APT28, targeting Ukraine and Poland to deploy previously undocumented malware, OCEANMAP, MASEPIE, and STEELHOOK, to gather sensitive information.

Meanwhile, a high severity zero-day vulnerability (CVE-2023-39336), in Ivanti Endpoint Manager that posed a risk of pre-authenticated sql injection and possibly Remote Code Injection in case of core server. These observed attacks have been on the rise, posing a significant threat worldwide.

Subscribe to receive our weekly threat digests and newsletters directly in your inbox.

Recent Resources

Dive into our library of resources for expert insights, guides, and in-depth analysis on maximizing Uni5 Xposure’s capabilities

Hive Pro’s Gartner Recognition in the Hype Cycle for Security Operations 2025: What It Means for Security Leaders and the Future of Cybersecurity

Cybersecurity is a race against time, threat actors and attacks. And the industry’s wish has also come true, cybersecurity is

Geopolitical Aggression Trigger Digital Sabotage on Critical Infrastructure

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all

From Fragments to Focused: How Acme Financial Elevated Its Cybersecurity with Hive Pro

In today’s complex threat landscape, even the most well-equipped organizations struggle with aligning tools, teams, and intelligence. Acme Financial (alias

Navigating the Cyber Threat Landscape in 2025: Key Insights for Security Leaders

2025 is half way done already and it has been evolving at an unprecedented pace, presenting new challenges and opportunities

Scattered Spider’s Strategic Hunt: Is Your Industry Next?

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all

The Exposure Convergence: Why Identity, Infrastructure, and Intelligence Are Converging

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all

Threat Exposure as a Narrative: If Attackers Tell a Story, Why Don’t We?

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all

The Psychology of Exposure: Why Security Teams Ignore What’s Right in Front of Them

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all

Book a demo and find out more about how Hive Pro can double your operational efficiency