threat actor
Understanding Illicit Ecosystems: Weaponizing Mainstream Apps and Social Infrastructure
As part of our ongoing series, we focus on the shared infrastructure that fuels threat actors; the intersection of mainstream social media, open-source messaging platforms, and gaming communities. The post Understanding Illicit ...
Understanding Illicit Ecosystems: XSS and the Current State of the Russian-Speaking Underground
In this post, we explore XSS’ shift from a unified forum to a scattered community spread across several competing factions. The post Understanding Illicit Ecosystems: XSS and the Current State of the ...
The Language of Emojis in Threat Intelligence: How Adversaries Signal, Obfuscate, and Coordinate Online
As threat actor activity continues to shift toward informal, fast-moving communication platforms such as Telegram and Discord, the way adversaries communicate is evolving. Emojis, often dismissed as casual or nontechnical, have become ...
The Human Element: Turning Threat Actor OPSEC Fails into Investigative Breakthroughs
In this post, we explore how the psychological traps of operational security can unmask even the most sophisticated actors. The post The Human Element: Turning Threat Actor OPSEC Fails into Investigative Breakthroughs ...
How China’s “Walled Garden” is Redefining the Cyber Threat Landscape
In our latest webinar, Flashpoint unpacks the architecture of Chinese threat actor cyber ecosytem—a parallel offensive stack fueled by government mandates and commercialized hacker-for-hire industry. The post How China’s “Walled Garden” is ...
The Top Threat Actor Groups Targeting the Financial Sector
In this post, we identify and analyze the top threat actors that have been actively targeting the financial sector between April 2024 and April 2025. The post The Top Threat Actor Groups ...
How Ransomware Attacks Leverage Cyber Insurance Policies
Ransomware attacks continue to evolve into sophisticated strategic and psychological operations. Threat actors are always seeking ways to maximize their illicit gains, and they’ve now discovered a powerful piece to leverage: a ...
Three Nation-State Campaigns Targeting Healthcare, Banking Discovered
Researchers have identified three distinct nation-state campaigns leveraging advanced highly evasive and adaptive threat (HEAT) tactics ...
GambleForce Attacks: APAC Firms Targeted With SQL Injections
In light of recent GambleForce attacks, a new threat actor has emerged, targeting more than 20 organizations across the Asia-Pacific region. The hacker group is mainly known for deploying SQL injections to ...
Winter Vivern’s Roundcube Zero-Day Exploits
In a recent cybersecurity development, an elusive threat actor named Winter Vivern aimed its sights at the popular Roundcube webmail software, successfully exploiting a zero-day vulnerability on October 11th. This breach allowed ...
