YoMix saw a significant increase in funds in 2023, with about one-third of inflows originating from wallets associated with crypto hacks, demonstrating the adaptability of sophisticated threat actors.

The Voltzite threat, a subset of China’s Volt Typhoon APT, has been actively targeting US electric companies and African electric transmission and distribution organizations, with the intent to compromise physical industrial control systems.

Researchers from Unit 42 have discovered two separate campaigns, named Contagious Interview and Wagemole, targeting job seekers. These campaigns are linked to state-sponsored threat actors associated with North Korea.

AlphaLock’s business model represents a new and sophisticated approach to cybercrime, creating a pipeline of trained hackers and monetizing their services through an affiliate program.

They have created fake skills assessment portals to trick recruiters into registering for an account. Previously, they used platforms like LinkedIn and employed lures related to skills assessment.

DarkCasino exploited a WinRAR 0-day vulnerability (CVE-2023-38831) to launch phishing attacks against forum users, posing a significant threat due to the large installed base and difficulty in identifying and defending against these attacks.

Hunters International focuses on data exfiltration rather than encryption and primarily targets victims in the United States, the UK, Germany, and Namibia, including hospitals.