Threat Advisories:

VENON Trojan Targets 33 Brazilian Financial Platforms AI-Assisted Slopoly Backdoor Powers Interlock Ransomware Intrusion PhantomRaven: Multi-Wave npm Campaign Stealing CI/CD and Developer Credentials APT28 Deploys Modified Covenant to Spy on Ukrainian Government Microsoft’s March 2026 Patch Tuesday Fake Strike Reports, Real Malware: The LOTUSLITE Delivery Chain Microsoft Teams Social Engineering Delivers A0Backdoor Malware Void Manticore: Iran’s Evolving Cyber Warfare Model Cisco Warns of Actively Exploited Flaws in Catalyst SD-WAN Manager ClipXDaemon Clipboard Attack: Linux Malware Targeting Crypto Payments VMware Patches Aria Operations Flaws as Exploitation Emerges in the Wild Iran-Linked Dust Specter Launches Cyberattack on Iraqi Officials Ruby Jumper: APT37’s Cloud-to-Air-Gap Espionage Framework Dohdoor Malware Campaign Targeting U.S. Education and Healthcare Sectors MIMICRAT Remote Control Delivered Through Trusted Platforms CVE-2026-20127: UAT-8616 Exploiting Cisco Catalyst SD-WAN Zero-Day SANDWORM_MODE: npm Supply Chain Attack Targeting AI Development Tools Mercenary Akula’s Court-Themed Campaign Hits European Finance Operation Olalampo: MuddyWater’s Expanding Campaign Across MENA February 2026 Linux Patch Roundup

Critical Threat Research : Middle-East at WAR: The Rapidly Escalating Iranian Cyber Threat Download the Report

Book a Demo Threat Digest - Subscribe

Mallox Ransomware is Ramping up its Operation

Threat Level – Amber | Vulnerability Report

Mallox ransomware strains have been spotted in the wild, indicating that the ransomware is operational, propagating rapidly, and infecting entities. An unknown .NET-based loader distributes these Mallox ransomware samples. The loader then downloads and encrypts data on the victim’s device with Mallox ransomware from a remote source.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox