Skip to content
Threat Feed
Subscribe

Actor

GhostEmperor

4 briefs RSS
Also known as: Salt Typhoon FamousSparrow UNC5807
medium threat

Detecting Anomalous Cisco IOS XE Programmatic WebUI Configuration Changes

Detection of programmatic configuration modifications on Cisco IOS XE devices via the WebUI WSMA process associated with the Salt Typhoon campaign.

IOS XE Salt Typhoon +3 networking infrastructure salt-typhoon
2t
high threat

China-Aligned FamousSparrow Deploys SparroWocky Backdoor in Latin America

The state-sponsored threat actor FamousSparrow is deploying the new modular SparroWocky C++ backdoor against government entities in Latin America using advanced anti-analysis techniques.

Salt Typhoon +3 cyber-espionage backdoor windows latam state-sponsored
1r 4t 1i
high threat

M-Trends 2026: Evolving Threat Landscape

The M-Trends 2026 report highlights the increasing sophistication of threat actors, including voice phishing attacks targeting SaaS environments, ransomware groups actively destroying recovery capabilities, and espionage groups exploiting edge devices for persistent access, revealing a shift towards faster hand-offs between initial access brokers and ransomware deployers.

Scattered Spider +10 threat-report ransomware phishing saas
3r 10t
high threat

M-Trends 2026: Evolving Threat Landscape

The M-Trends 2026 report highlights the increasing sophistication of threat actors, including voice phishing attacks targeting SaaS environments, ransomware groups actively destroying recovery capabilities, and espionage groups exploiting edge devices for persistent access, revealing a shift towards faster hand-offs between initial access brokers and ransomware deployers.

Scattered Spider +10 threat-report ransomware phishing saas
3r 10t