Lazarus Group Archivi

OT attacks and cyber breaches, APT and cyberspionage campaigns, AI frameworks and emerging threats

Cyberattacks and compromises: from industrial systems to digital platforms Between 1 and 2 November 2026, a series of cyberattacks affected refrigeration systems at supermarkets and commercial businesses in several European...

PHP2Shell, Fragnesia and new ITW exploits, APT and cyberspionage operations, the latest from Italy

30 Oct

Vulnerabilities: new developments concerning PHP2Shell and active exploitation of flaws in Linux, Brotli and enterprise products During the week, developments concerning CVE-2026-109618 and CVE-2026-109619 (CVSS 9.2), collectively known as PHP2Shell,...

PHP2Shell and new ITW exploits, APT and cyberspionage operations, the latest from Italy

23 Oct

Vulnerabilities: active exploitation of vulnerabilities in PHP, Plex, Siemens, Nextcloud and BeyondTrust During the week, the landscape of vulnerabilities exploited in the wild (ITW) was marked by an intensification of...

Attacks targeting Italy, APT and cyberspionage campaigns, new vulnerabilities exploited ITW

16 Oct

Italy: DDoS attacks, ransomware and smishing operations Over the past week, the pro-Russian collective NoName057(16) once again turned its attention to Italy, targeting several portals, including: Municipality of Bari; DGS...

Italy targeted by multiple adversaries, APT and cyberspionage campaigns, breaches and AI

28 Sep

Italy: attacks from multiple threat sources detected The pro-Russian hacktivist collective NoName057(16) has once again targeted Italian portals. According to the group, the country was targeted because it had allegedly...

Novel APT Operations, In-the-Wild Exploits and New 0-Days, High-Profile Compromises

31 Jul

APT: new operations conducted across Eurasia and the Middle East Since at least July 2025, the Russian state-sponsored group Void Blizzard (also known as Laundry Bear, CL-STA-1114, and TA488) has...

The latest from Italy, emerging APT operations, newly announced breaches, and law enforcement activity

13 Jul

Italy: malware, smishing, and ransomware activity On July 9, 2026, security researchers identified a campaign in Italy impersonating the UniCredit brand by promoting a fake banking rewards program designed to...

Attacks in Italy, cybercrime operations, developments in the APT and hacktivist landscape

26 Jun

Italy: cybercrime and hacktivist activities Several active phishing operations have been detected in Italy that fraudulently exploit the name, logo, and visual identity of the Italian Revenue Agency (Agenzia delle...

NoName057(16) targets Italy, new cybercrime offensives, the latest from Moscow and Pyongyang

05 Jun

Italy: DDoS offensives targeting Italian organizations Following the trend observed last week, the pro-Russian hacktivist collective NoName057(16) renewed its focus on Italy. The adversary claimed DDoS attacks against the following...

Italy targeted by multiple adversaries, novel APT operations, emerging threats, and supply chain compromises

03 Jun

Italy: New ransomware claims The pro-Russian hacktivist collective NoName057(16) has resumed targeting Italian websites following the allocation of an additional €10 million in support of Ukraine for the restoration of...