Find compromised credentials, vulnerable assets, and dark web leaks in seconds. Free threat intelligence tools used by 10,000+ security teams worldwide.

Find compromised credentials, vulnerable assets, and dark web leaks in seconds. Free threat intelligence tools used by 10,000+ security teams worldwide.

Konni (TA406) is targeting Ukraine with malicious LNK files that deliver the VelvetCake downloader. Inside the execution chain, persistence, and IOCs...

Today we are joined by Ensar Seker, VP of Research and CISO at SOCRadar, discussing their work on "Exposing AnonyMousKIT: AI-Powered PhaaS Supply Chain." An investigation into AnonyMousKIT reveals an AI-powered Phishing-as-a-Service platform designed to steal Apple credentials and disable Activation Lock on stolen devices. The platform uses email, SMS, WhatsApp, and AI-driven voice calls to impersonate Apple Support, with researchers uncovering a broader ecosystem spanning 506 domains, 168 storefront brands, and 30 backend installations. Despite its sophisticated social-engineering capabilities, basic coding flaws exposed extensive operational logs and revealed the shared infrastructure, developer activity, and reseller network behind the criminal operation. The research and executive brief can be found here: ⁠Exposing AnonyMousKIT: AI-Powered PhaaS Supply Chain

Enroll in SOCRadar Academy with your business email before June 15th for FREE surprise trainings and certifications. 🔗 Enrollment Link: You Should Know: 1. Why SOCRadar Academy? SOCRadar provides Extended Threat Intelligence (ETI), essential for cybersecurity professionals. The academy offers: - Free certified training (limited time) - Threat intelligence insights - SOC (Security Operations Center) skills 2. How to Maximize This Opportunity…

North Korean cybercriminals are using newly identified malware to target individuals and organizations focused on Ukraine in an apparent bid to gather strategic intelligence on the Russia-Ukraine war, according to a U.S. threat intelligence firm. In a report published Tuesday, SOCRadar attributed a recent campaign, dubbed “Operation Conflict Compass” by researchers, to the North Korean […] The post North Korean cybercriminals target Ukraine-focused groups with new malware appeared first on NK PRO.

Find compromised credentials, vulnerable assets, and dark web leaks in seconds. Free threat intelligence tools used by 10,000+ security teams worldwide.

Following a post by skocherhan on X, the SOCRadar Threat Research Unit (STRU) analyzed Kynx, a Malware-as-a-Service (MaaS) stealer featuring a web panel deeply integrated with the malware’s execution flow. Kynx is sold on a tiered subscription model (Free, Plus, Pro, Ultra) through a Turkish gaming forum, and reaches well beyond typical credential theft into crypto wallets, gaming accounts, and AI developer tools like Claude Code, Cursor, GitHub Copilot, and ChatGPT.

Security firm SOCRadar says the large-scale FortiBleed campaign targeting Fortinet FortiGate devices used custom sniffers to harvest authentication secrets from compromised firewalls and steal credentials.

The SOCRadar Threat Research Team, among the first to identify and analyze the FortiBleed leak, has opened its research to the public, having already alerted thousands of customers and national CERTs — and invites every government cybersecurity agency to coordinate on the data. Over the past 24 hours the company’s Threat Research team has reconstructed the full attack chain behind the campaign, validated the exposed records, and proactively notified thousands of affected customers as well as the local and national CERTs it works with.

SOCRadar has detected that sensitive data of 65,000 entities became public because of a misconfigured server. The leak includes Proof-of-Execution (PoE) and

SOCRadar Threat Research Unit (STRU) has uncovered an end-to-end cybercrime operation dubbed Operation Master, in which a threat actor compromised...

SOCRadar launched its AI Agent Marketplace at RSA Conference 2026, introducing a modular hub where organizations can browse, purchase, and deploy specialized autonomous AI agents within the SOCRadar Extended Threat Intelligence Platform. The release also adds Identity and Access Intelligence capabilities designed to address what the company describes as identity “blind spots” across third-party SaaS..

北朝鮮関連の脅威アクターKonniが、PDF文書に偽装した悪意のあるWindowsショートカットファイルを使用し、ウクライナ関連組織を標的としたサイバースパイ活動を展開していることが明らかになりました。 SOCRadar Threat Research Unitが「Operation Conflict Compass

北朝鮮とつながりのあるハッカー集団が、ウクライナ関連の人物・組織を標的に、偽のPDF文書を使って「VelvetCake」と呼ばれるPowerShellマルウェアツールをインストールさせる攻撃キャンペーンを展開しています。 SOCRadarの脅威リサーチユニットはこのキャンペーンを「Operation Conflict

Today, SOCRadar published new research WP Botnet Master: How a Security Researcher's Paid Course Built a 2.1-Million-Credential WordPress Botnet. On 13 July 2026, SOCRadar Researchers recovered the complete toolkit behind a distributed WordPress brute-force operation the operator called "WP Botnet Master." We expected to be looking at the work of a single skilled attacker. What we found was a…