ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
global
2 incidentes
2 paises
2 sectores
threat-actor Ultimo: 2026-06-29
Aliases: Umbrella Revolution, Spear-phishing, técnicas como el uso de "web bugs", FlowerLady, POISON IVY, PlugX, entre otros, Southeast Asia, para detectar señales de ataque potencial, APT38, ElectricFish, BlueNoroff, TA444, ofensivas en el ámbito digital, Fraternal Jackal, Ababil, ha sido identificado con la plataforma pastebin, "Olympic Games"
Aliases del actor
Umbrella RevolutionSpear-phishingtécnicas como el uso de "web bugs"FlowerLadyPOISON IVYPlugXentre otrosSoutheast Asiapara detectar señales de ataque potencialAPT38ElectricFishBlueNoroffTA444ofensivas en el ámbito digitalFraternal JackalAbabilha sido identificado con la plataforma pastebin"Olympic Games""Developed Panda Zeus"SIG25 (NSA)aunque no hay confirmación directaEmdiviCloudy Omega indica una estrategia de desinformaciónlo que puede dificultar la detecciónel rastreosecurelistOperation Ghoulingenieríamanufactura en más de 30 paíseswwwTG-0110APT3
Actores similares
Canales, DLS e infraestructura asociada
Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.
| Tipo | Estado | Host / enlace | Title / ultimo titulo |
|---|---|---|---|
| DLS / leak site | unknown | duckduckgo.com | Axiom GlobalNEW |
| DLS / leak site | unknown | duckduckgo.com | Axiom GlobalNEW |
| DLS / onion | unknown | om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion | ESMS Global Limited |
| DLS / onion | unknown | om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion | ESMS Global Limited |
| DLS / onion | unknown | om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion | ESMS Global Limited |
| DLS / onion | unknown | om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion | ESMS Global Limited |
| DLS / onion | unknown | om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion | ESMS Global Limited |
| DLS / onion | unknown | om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion | ESMS Global Limited |
| DLS / onion | unknown | om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion | ESMS Global Limited |
| DLS / onion | unknown | om6q4a6cyipxvt7ioudxt24cw4oqu4yodmqzl25mqd2hgllymrgu4aqd.onion | ESMS Global Limited |
| DLS / leak site | unknown | ransomware.anggipradana.com | Ransomware Group: global |
| Foro | unknown | nitter.net | Daily Dark Web: Call of Duty: Mobile Internal Offsets Allegedly Released A forum user has shared what they claim is an internal `offsets dump.cs` file for the global version of Call of Duty: Mobile (package: `com.activision.callofduty.shooter`). The post includes a public download link and states the file will be reposted if the original link becomes unavailable. |
| Foro | unknown | x.com | Daily Dark Web: Call of Duty: Mobile Internal Offsets Allegedly Released A forum user has shared what they claim is an internal `offsets dump.cs` file for the global version of Call of Duty: Mobile (package: `com.activision.callofduty.shooter`). The post includes a public download link and states the file will be reposted if the original link becomes unavailable. |
| DLS / leak site | unknown | nitter.net | Ido Cohen: Tracking the pulse of ransomware in 2026—these are the groups leading the global attack landscape right now: Qilin – 665 attacks The Gentleman – 453 attacks Akira – 290 attacks DragonForce – 245 attacks INC – 239 attacks Lockbit – 199 attacks Play – 154 attacks CLOP – 127 attacks NightSpire – 115 attacks CoinBase Cartel – 97 attacks Stay ahead of ransomware threats. |
| X/Twitter | unknown | x.com | Ido Cohen: We continue to monitor additional sources in the darknet. Here are some of the events that were added to our platform in the last week. 1 A major breach exposed over 500GB of sensitive personal information from job seekers, posing a high risk of identity theft and fraud. 2 Remote access to POS systems is being sold, threatening financial data and sensitive customer information across large retail businesses globally. |
| DLS / leak site | unknown | nitter.net | Group-IB Threat Intelligence: Group-IB telemetry has identified over 62,000 compromised endpoints across more than 160 countries infected with #MilleniumRAT (4.x). The infection velocity is alarming, with over 39,000 of these detections occurring in Q1 2026 alone, representing 64% of all infections. This demonstrates a rapidly accelerating global campaign. |
| X/Twitter | unknown | x.com | Group-IB Threat Intelligence: Victimology analysis shows overlapping global targeting across both campaigns. Reward Points phishing primarily targets #financial services and telecom users across #APAC, while Failed Parcel Delivery campaigns focus on logistics entities across Europe, APAC, and the US. Despite sector-specific lures, the geographic distribution and brand impersonation patterns indicate coordinated deployment within the same smishing infrastructure. #ThreatIntel |
| DLS / leak site | unknown | nitter.net | Ido Cohen: We continue to monitor additional sources in the darknet. Here are some of the events that were added to our platform in the last week. 1 A major breach exposed over 500GB of sensitive personal information from job seekers, posing a high risk of identity theft and fraud. 2 Remote access to POS systems is being sold, threatening financial data and sensitive customer information across large retail businesses globally. |
| DLS / leak site | unknown | duckduckgo.com | ALS Global |
| DLS / leak site | unknown | duckduckgo.com | ALS Global |
| DLS / leak site | unknown | nitter.net | Group-IB Threat Intelligence: Victimology analysis shows overlapping global targeting across both campaigns. Reward Points phishing primarily targets #financial services and telecom users across #APAC, while Failed Parcel Delivery campaigns focus on logistics entities across Europe, APAC, and the US. Despite sector-specific lures, the geographic distribution and brand impersonation patterns indicate coordinated deployment within the same smishing infrastructure. #ThreatIntel |
| DLS / leak site | unknown | www.breachsense.com | ocaglobal.com - Conti Data Breach |
| DLS / leak site | unknown | getbootstrap.com | ocaglobal.com - Conti Data Breach |
| Repositorio | unknown | github.com | ocaglobal.com - Conti Data Breach |
| DLS / onion | offline | vg6xwkmfyirv3l6qtqus7jykcuvgx6imegb73hqny2avxccnmqt5m2id.onion | CTI.FYI |
| DLS / onion | offline | gdbkvfe6g3whrzkdlbytksygk45zwgmnzh5i2xmqyo3mrpipysjagqyd.onion | CTI.FYI |
| DLS / onion | unknown | vg6xwkmfyirv3l6qtqus7jykcuvgx6imegb73hqny2avxccnmqt5m2id.onion | marktsec |
Paises afectados
Russia (1)
United States (1)Sectores atacados
Healthcare (1)
Software (1)