Blog
How Hackers Robbed Bitget of $388 Million Without Breaking a Single Lock
Imagine a bank heist. In the movies, they drill through vaults, blow up safes, or hold tellers at gunpoint. But what if the world's most successful bank robbery didn't involve a single explosive or a…
Beyond the Leak How CyberLeek Turned Community Loyalty Into a Crypto Pump
Who is Cyberleek? CyberLeek is the anonymous persona behind a series of ongoing Grand Theft Auto VI leaks that began on August 18, 2026, when the leaker began releasing gameplay footage, cropped map…
EtherRAT Blockchain C2 Infrastructure Attributed to Lazarus
Blockchain technology was built for trustless, decentralized finance. Threat actors found another use for it.EtherRAT is a JavaScript-based remote access trojan that stores its command and control…
ROGUE SIGNAL: INSIDE THE CALCULATED US–ISRAELI CYBER AND MILITARY WAR ON IRAN
This analysis examines the full spectrum of operations behind the American-Israeli strike on Iran beginning February 28, 2026, from long-term cyber infiltration and network compromise to coordinated…
The Exploit Theater: Nation-State Cyber Clashes in South Asia
Executive Summary In May 2025, cyberspace emerged as the battleground for a high-stakes digital conflict between India and Pakistan. This report provides a structured threat intelligence analysis of…
CVE-2025 Exploitation by the Five Elders in Their Global Cyber Campaigns
Executive Summary: This report documents confirmed exploitation of 2025 CVEs by nation-state APT groups and cybercriminal collectives. Only incidents with publicly verifiable sources are included…
🐎 Lasso Trail: Tracking Chinese ZuoRat-Style ORB Proxy Infrastructure Supporting Phishing and Malware Campaigns
✨ Executive Summary ZuoRAT is a Chinese-linked Remote Access Trojan (RAT) targeting SOHO routers for internal surveillance and device compromise. It leverages an ORB-style proxy C2 network where…
Rinnegan Awakening Unlocking Kimsuk’s-APT43 Hidden Shadow Network
Alias: Mystery Baby,Baby Coin,Smoke Screen,Black Banshee,Velvet Chollima,Thallium,Emerald Sleet,THALLIUM,Sparkling Pisces Kimsuky was first disclosed and named by Kaspersky in 2013, with attack…
CHASING SHADOWS THE HUNT FOR APT BITTER AND ITS HIDDEN INFRASTRUCTURE
Alias: Apt-c-08, Apt-k-47, Manlinghua, Turtlepower, NixBackdoor, Nimbo-C2, ORPCBackdoor Recently, I discovered that Mysterious Elephant, also known as APT-K-47, operates under the umbrella of APT-C…