Research reports

Weaponizing the Protectors: TeamPCP’s Multi-Stage Supply Chain Attack on Security Infrastructure

Between late February and March 2026, threat group TeamPCP conducted a highly calculated, escalating sequence of supply chain threats. It systematically compromised widely trusted open-source security tools, including the vulnerability scanners Trivy and KICS…

Supply chain

Trivy ecosystem supply chain temporarily compromised

On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77 version tags in aquasecurity/setup-trivy On March 22, 2026, a threat actor used compromised credentials to publish a malicious…

Supply chain

The Eye of the Tiger

Cyber espionage has been a hot topic through the last years. Computer attacks known as “APT” (Advanced Persistent Threat) have become widely reported and emphasized by the media, damages are now considered as real and strategic trends are moving in cyber…

State-sponsored

Internet Crime Complaint Center (IC3)

The Federal Bureau of Investigation (FBI) is issuing this Public Service Announcement (PSA) to warn the public about an emerging Phishing1-as-a-Service2 (PhaaS) platform called Kali365, first seen in April 2026. Kali365 has primarily been distributed via…

Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack

Update March 23, 17:40 UTC: Wiz Research has identified a parallel compromise of kics-github-action On March 19, 2026, threat actors compromised Aqua Security's Trivy vulnerability scanner, injecting credential-stealing malware into official releases and…

Supply chain

Analyzing TeamPCP’s Supply Chain Attacks: Checkmarx KICS and elementary-data in CI/CD Credential Theft

By By: Jacob Santos, John Rainier Navato May 13, 2026 Read time: 17 min (4541 words) Summary Our research analyzed the April 22 Checkmarx Keeping Infrastructure as Code Secure (KICS) and April 24 elementary-data incidents as two case studies within a broader…

Supply chain

Mini Shai-Hulud Strikes Again: TanStack more npm Packages Compromised

On 11 May 2026, TeamPCP launched a coordinated supply chain attack against the npm and PyPi ecosystems, compromising packages across multiple namespaces simultaneously. May 13, 2026 2:30 UTC update: Further analysis of the @uipath/* and @mistralai/* npm…

Supply chain

TeamPCP deploys CanisterWorm on NPM following Trivy compromise

On 20 Mar 2026, 20:45 UTC, we detected a large number of packages being compromised on NPM with a new worm that hasn't been observed before. We're calling this specific attack CanisterWorm, because it makes use of an ICP Canister for its C2 dead-drop, which…

Supply chain

Token Bingo: Don’t Let Your Code be the Winner

In early April 2026, Arctic Wolf began tracking a large-scale device code phishing campaign impacting organizations across multiple regions and sectors. Similar to the widespread “Riding the Rails” campaign first observed in late March by Huntress, the threat…

Phishing

Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access

Since our February 2026 report on AI-related threat activity, Google Threat Intelligence Group (GTIG) has continued to track a maturing transition from nascent AI-enabled operations to the industrial-scale application of generative models within adversarial…

Vulnerabilities

TeamPCP expands: Supply chain compromise spreads from Trivy to Checkmarx GitHub Actions

On March 19, 2026, the threat actor known as TeamPCP compromised Aqua Security's Trivy vulnerability scanner and its associated GitHub Actions, injecting a credential-stealing payload into CI/CD pipelines across thousands of repositories. The incident was…

Supply chain

ShinyHunters Calling: Financially Motivated Data Extortion Group Targeting Enterprise Cloud Applications

EclecticIQ analysts assess with high confidence that ShinyHunters is expanding its operations by combining AI-enabled voice phishing, supply chain compromises, and leveraging malicious insiders, such as employees or contractors, who can provide direct access…

RansomwarePhishing

Exposing Fox Tempest: A malware-signing service operation

Fox Tempest is a financially motivated threat actor that operates a malware-signing-as-a-service (MSaaS) used by other cybercriminals to more effectively distribute malicious code, including ransomware. The threat actor abuses Microsoft Artifact Signing to…

Malware

Disrupting Fox Tempest: A cybercrime service that turned “verified” software into a pathway for ransomware

Every day, we decide what software to trust in seconds guided by simple labels such as “verified,” “secure,” and “safe to install.” The problem is that those signs can be manipulated. Today, Microsoft unsealed a legal case in the US District Court for the…

RansomwareMalware

Microsoft disrupts Fox Tempest malware-signing-as-a-service platform tied to ransomware gangs

Microsoft said it took down a critical service that helped cybercriminals slip through defenses by making malware look like legitimate software. The company unsealed a legal case in U.S. District Court on Tuesday detailing the disruption of Fox Tempest — a…

RansomwareMalware

SVG Phishing hits Ukraine with Amatera Stealer, PureMiner

No excerpt available.

InfostealersPhishing

Impersonation, Click Hijacking, and TDS: Inside a Malware Distribution Ecosystem

Check Point Research investigated a large-scale operation that impersonates open-source and freeware projects to capture search traffic, including lookalikes for researcher and security tooling such as Ghidra, dnSpy, and SpiderFoot. The sites are…

Malware

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

Since early May 2026, Microsoft Threat Intelligence has observed Storm-2945, a sub-cluster of Midnight Blizzard, conducting widespread but targeted traffic manipulation attacks involving hospitality sector networks served by captive portals worldwide. Despite…

State-sponsoredMalware

1337_GTWK Linux Malware Analysis

This is the second part of a two-part series about a new Linux malware sample that I analysed (Click here for Part 1). In Part 1, we examined its website and the malware’ itself. The malware consists of two stages, with the second stage comprising two…

Malware

MetaStealer traffic, new DGAs and analyzing the “tracker” backdoor DGA with AI

In this blog we simply want to highlight a few new additions to what appears to be related to MetaStealer, one is a new wordlist based DGA used by MetaStealer. We also want to highlight that MetaStealer’s proxies or ‘gates’ don’t actually care what domain…

Malware