Precursor Intelligence
Threat News
Latest cyber threat intelligence, breaches and exploitation
5 matching stories
PhishingDr.Web Q2 2026: +5.72% detections, +95.32% unique threats, MAX-messenger phishing wave
Dr.Web's Q2 2026 virus activity review reports a 5.72% increase in total detections and a 95.32% jump in unique threats, with encoder trojans and a MAX-messenger phishing campaign driving the top of the mix.
LAPSUS$ Phishing Campaign Targets Korean and Global Financial Sector
AhnLab ASEC's June 2026 threat analysis reveals a multi-stage LAPSUS$ phishing campaign targeting the Korean and global financial sector, using a chain of HTML, JS, EXE, and VBE attachments to deploy an infostealer payload.
Mirage2FA Phishing Toolkit Hijacks 4,500 Microsoft 365 Sessions via AiTM
Mirage2FA is an active phishing-as-a-service toolkit that hijacks Microsoft 365 sessions via Adversary-in-the-Middle, bypassing MFA to steal credentials, 2FA codes, and session cookies from 4,500+ US and EU organizations.
U-Bomb Rware Runs Active Leak Site with Proton Mail and BRC4/Sliver/Cobalt Strike Lateral Movement
U-Bomb ransomware, active since March 2023, operates a data leak site at a .onion address last visited 2026-04-28, delivers payloads via phishing email, and uses BRC4, Sliver, and Cobalt Strike for lateral movement before encrypting Windows and Linux targets.
APT28 Deploys BadPaw and MeowMeow Malware Duo Against Ukraine
APT28 (Fancy Bear) is running a new campaign against Ukrainian targets using two new .NET malware components, BadPaw (loader) and MeowMeow (backdoor), delivered through a phishing ZIP that opens an HTA file themed around Ukrainian border-crossing appeals.
