Latest Reports
Campaign Analysis
Silent Lynx Reads Russia’s Mail From Inside the Alliance
Recorded Future and Cisco tie the espionage actor Silent Lynx, at moderate confidence, to Kazakhstan, a member of Russia’s own security and economic blocs. Its targets read like a Kazakh intelligence requirements list, Russia, Belarus, and Central Asian neighbors timed to Kazakhstan’s own diplomacy.
Fear of a Breach Is How The Gentlemen Get Paid
The Gentlemen added ten names to its dedicated leak site this month, including Deloitte, KFC, and MoneyGram. None has confirmed a breach and no files have appeared. The ransomware-as-a-service operation does not need the claims proven. It only needs the accusation to travel faster than the evidence.
Threat Actor Asked AI Where to Sell Stolen Data Then to Write His Résumé
A lone threat actor pointed an open-source Chinese AI agent at South Korean banks and let cheap language models do the scaling. Then he asked one of those models to write his résumé. CrowdStrike recovered all of it, and the same memory that powered the attack documented the operator behind it.
China Paid UK Academics to Build Its Spy Tradecraft
MI5 named a Chinese front funding more than 100 UK academics to build AI and espionage tradecraft for the Ministry of State Security. No breach, no malware, just a grant. China did not hack the research. It bought it, and many of the academics never knew who was behind the money they took.
China Phished the People Who Write America's AI Rules
To learn where US AI policy is heading, a spy does not breach a frontier lab. It phishes the analysts shaping it. China-aligned TA419 did, impersonating a former White House official and an Anthropic employee. The model shows what America can build. The inbox shows what it plans to do.
ShinyHunters Survived Every Arrest but Now Someone Is Talking
Jordanian authorities detained Rey, who seized the ShinyHunters brand, and he is reportedly helping the FBI. Jailing members never killed the brand, and its dedicated leak sites keep coming back. A cooperating insider attacks the one thing ShinyHunters cannot re-host, the trust between its members.
Cyber Crime Put AI on the Payroll
Gambit Security cracked the staging server behind a card-theft campaign and found the AI crime story finally arriving. One threat actor rented open-source AI agents to breach 119 online retailers and steal more than 600,000 credit cards for roughly US$25 a target. AI did not attack. It did the work.