Precursor Intelligence

Threat News

Latest cyber threat intelligence, breaches and exploitation

1 matching story

BRC4
  • Ransomware Incident27 Aug 2026·2 sources

    U-Bomb Rware Runs Active Leak Site with Proton Mail and BRC4/Sliver/Cobalt Strike Lateral Movement

    U-Bomb ransomware, active since March 2023, operates a data leak site at a .onion address last visited 2026-04-28, delivers payloads via phishing email, and uses BRC4, Sliver, and Cobalt Strike for lateral movement before encrypting Windows and Linux targets.

    ransomwareU-Bomb0xFFF+3
    U-Bomb Rware Runs Active Leak Site with Proton Mail and BRC4/Sliver/Cobalt Strike Lateral Movement