Uptime Hamster: 0d 0h 0mDeploy: 5 Jul 2026 10:25Updated: 2026-07-10

Ido Cohen: APT73 continues to expand its operations. The group has added 3 new victims to its leak site, including a government entity in South America and a major international airport operator in Central Europe serving tens of millions of passengers annually. APT73 was added to the DarkFeed platform in mid-2024 and has since claimed 110+ victims.

Fecha
23 Jun 2026
Actor
ido_cohen2
Tipo
Ransomware
Pais
Unknown
Sector
Government
Confianza
high
63
Prioridad analitica
Media

Basado en actor, pais, IOCs, TTPs, filtracion y calidad de contexto.

1IOCs
1TTPs
ido_cohen2Actor
UnknownPais
Executive Summary
Independent cyber threat research covering malware campaigns, phishing infrastructure and vulnerability exploitation.

Key Points

  • Tweet original en X
  • Perfil de @ido_cohen2

APT73 continues to expand its operations. The group has added 3 new victims to its leak site, including a government entity in South America and a major international airport operator in Central Europe serving tens of millions of passengers annually. APT73 was added to the DarkFeed platform in mid-2024 and has since claimed 110+ victims.

Independent cyber threat research covering malware campaigns, phishing infrastructure and vulnerability exploitation.


APT73 continues to expand its operations. The group has added 3 new victims to its leak site, including a government entity in South America and a major international airport operator in Central Europe serving tens of millions of passengers annually. APT73 was added to the DarkFeed platform in mid-2024 and has since claimed 110+ victims. Want to track APT73 activity and emerging ransomware/extortion campaigns in real time? darkfeed.io/get-started/ #APT73 #Ransomware #ThreatIntelligence #CyberSecurity #DarkWeb #CyberExtortion #CTI #InfoSec

Ido Cohen: APT73 continues to expand its operations. The group has added 3 new victims to its leak site, including a government entity in South America and a major international airport operator in Central Europe serving tens of millions of passengers annually. APT73 was added to the DarkFeed platform in mid-2024 and has since claimed 110+ victims.


Referencias

Diamond Model

Adversary
ido_cohen2
Ver perfil →
Victim
Ido Cohen: APT73 continues to expand its operations. The group has added 3 new victims to its leak site, including a government entity in South America and a major international airport operator in Central Europe serving tens of millions of passengers annually. APT73 was added to the DarkFeed platform in mid-2024 and has since claimed 110+ victims.
Capability
Ransomware
1 TTPs MITRE
Infrastructure
darkfeed.io

Indicadores de Compromiso (IOCs)

TipoValorContextoOSINT
domain darkfeed.io observed in tweet VT OffSec SOCRadar

Referencias y enlaces

→ Perfil del actor ido_cohen2 en el blog → Ver ido_cohen2 en IntelTracker → URL IntelTracker: nitter.net→ URL IntelTracker: x.com → Fuente OSINT: nitter.net→ Fuente OSINT: x.com → Buscar ido_cohen2 en APTTrail → Repositorio APTTrail → Buscar en Google News → Analizar en VirusTotal → Feed RSS del blog
← Volver al panel de inteligencia

Incidentes recientes