INC RANSOM Team Archivi

Updates in cybercrime, the latest from Italy, several ITW exploits emerged

Cybercrime: several global campaigns reported A group called UNC6692 conducted a multi-stage intrusion campaign – based on social engineering techniques and a modular suite of custom malware called SNOW –...

Attacks in Italy, several breaches announced, new state-sponsored operations

07 Apr

Italy: spyware, breaches, ransomware and DDoS WhatsApp notified approximately 200 users, primarily in Italy, that they had been targeted through a counterfeit version of its iPhone application containing spyware. Those...

Cyber operations in the Iranian conflict, attacks in Italy, developments in the APT landscape

16 Mar

Iran: cyberattacks in the context of the conflict Within the context of the escalation between the United States, Israel, and Iran, the cyber domain continues to represent a significant operational...

Iranian conflict and cyber warfare, attacks in Italy, LeakBase and Tycoon 2FA disrupted

09 Mar

Iran: cyber offensives linked to the conflict The conflict between the United States, Israel, and Iran has unfolded alongside extensive cyber operations, with reports of widespread internet disruptions, hacking of...

Phishing and ransomware in Italy, notified data breaches, new spyware attacks

23 Feb

Italy: cybercrime operations across the peninsula A resurgence of activity linked to a thread hijacking campaign documented in December 2025 has recently been identified. The campaign targets organizations based in...

New attacks in Italy, data breaches reported, offensives from China

05 Jan

Italy: new phishing and ransomware offensives Over the past two weeks, multiple phishing campaigns have targeted Italian users. One operation abused the name and logo of Fineco Bank. In particular, a fraudulent email with the subject “Confirmation of...

Chinese and Russian APT activity tracked, multiple breach disclosures, ShadowV2 observed and malicious npm packages identified

01 Dec

APT: updates on China- and Russia-linked adversaries Security researchers have uncovered Operation WrtHug, a campaign that in recent months has targeted SOHO devices worldwide by exploiting n-day vulnerabilities in the...

New attacks in Italy, state-sponsored activity, operations in Ukraine

17 Nov

Italy: cybercrime operations target the country During the past week, several phishing campaigns targeting Italy were identified. In one case, a fake login portal for students and staff of the...