Dark Storm Team Archivi

PHP2Shell, Fragnesia and new ITW exploits, APT and cyberspionage operations, the latest from Italy

Vulnerabilities: new developments concerning PHP2Shell and active exploitation of flaws in Linux, Brotli and enterprise products During the week, developments concerning CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2), collectively known as PHP2Shell,...

Attacks targeting Italy, APT and cyberspionage campaigns, new vulnerabilities exploited ITW

16 Oct

Italy: DDoS attacks, ransomware and smishing operations Over the past week, the pro-Russian collective NoName057(16) once again turned its attention to Italy, targeting several portals, including: Municipality of Bari; DGS...

The latest from Italy, ITW exploits and new 0-days, Oxygen Forensics, breaches and arrests

02 Oct

Italy: phishing, hacktivism and new ransomware claims A “documents”-themed phishing campaign has been identified in Italy, exploiting the name and logo of the National Research Council (CNR) to exfiltrate employees’...

Italy targeted by multiple adversaries, APT and cyberspionage campaigns, breaches and AI

28 Sep

Italy: attacks from multiple threat sources detected The pro-Russian hacktivist collective NoName057(16) has once again targeted Italian portals. According to the group, the country was targeted because it had allegedly...

Multiple breaches announced, vulnerabilities exploited ITW, attacks in Italy

15 Jun

Breaches: University of Oxford, World Food Programme (WFP), Tchap and ServiceNow targeted Third-party provider Group GTI, responsible for the CareerConnect platform used by the University of Oxford, informed the institution...

NoName057(16) targets Italy, new cybercrime offensives, the latest from Moscow and Pyongyang

05 Jun

Italy: DDoS offensives targeting Italian organizations Following the trend observed last week, the pro-Russian hacktivist collective NoName057(16) renewed its focus on Italy. The adversary claimed DDoS attacks against the following...

War in Iran and cyber operations, offensive activity in Italy, iOS threats, and phishing campaigns

30 Mar

Iran: cyber offensives linked to the conflict In the context of the escalation between the United States, Israel, and Iran, the cyber domain continues to represent a relevant operational space,...

Iranian conflict and cyber warfare, attacks in Italy, LeakBase and Tycoon 2FA disrupted

09 Mar

Iran: cyber offensives linked to the conflict The conflict between the United States, Israel, and Iran has unfolded alongside extensive cyber operations, with reports of widespread internet disruptions, hacking of...

DDoS and ransomware in Italy, supply-chain attacks, new Russian offensives

09 Feb

Italy: attacks on various portals linked to the Winter Olympic Games, with ransomware claims After targeting German and Ukrainian entities, the pro-Russian collective NoName057(16) redirected its DDoS attacks against several...

Italy targeted by multiple adversaries, new APT operations, latest developments in cybercrime

10 Nov

Italy: DDoS, phishing, and ransomware attacks detected, along with BadCandy distribution During the first weekend of the month, NoName057(16) continued to claim DDoS attacks against the following Italian targets: the...