Tag
Threat Actor Leverages AI-Driven ARTEX Tooling to Target South Korean Financial Institutions
3 TTPs 10 IOCsAn unidentified, likely Chinese-speaking threat actor is targeting South Korean financial entities using the open-source ARTEX penetration testing framework managed by Large Language Models to conduct reconnaissance and data exfiltration.
Privilege Escalation in IBM Financial Transaction Manager for Red Hat OpenShift
2 TTPs 1 CVEIBM Financial Transaction Manager (FTM) for Red Hat OpenShift contains a critical privilege management flaw, CVE-2026-17645, that allows a remote authenticated attacker to escalate privileges.
Global Stock Exchange Hit by Monthslong Email Campaign
3 rules 7 TTPsAn unknown threat actor gained continuous administrative access to a senior finance executive's Microsoft Outlook mailbox at a global stock exchange for at least five months, deploying custom infostealers via scheduled tasks and exfiltrating sensitive emails through a Dropbox-based command and control channel after an initial lateral movement event.