Qilin Team Archivi

Attacks in Italy, several breaches announced, new state-sponsored operations

Italy: spyware, breaches, ransomware and DDoS WhatsApp notified approximately 200 users, primarily in Italy, that they had been targeted through a counterfeit version of its iPhone application containing spyware. Those...

War in Iran and cyber operations, offensive activity in Italy, iOS threats, and phishing campaigns

30 Mar

Iran: cyber offensives linked to the conflict In the context of the escalation between the United States, Israel, and Iran, the cyber domain continues to represent a relevant operational space,...

Cyber operations in the Iranian conflict, attacks in Italy, developments in the APT landscape

16 Mar

Iran: cyberattacks in the context of the conflict Within the context of the escalation between the United States, Israel, and Iran, the cyber domain continues to represent a significant operational...

Latest from Italy, updates in the APT landscape, multiple vulnerabilities exploited ITW

27 Feb

Italy: multiple malicious activities observed Over the past week, several offensive operations targeted Italian entities. Specifically, a new distribution campaign involving a malware strain named UpCrypter was tracked, inducing targets...

Phishing and ransomware in Italy, notified data breaches, new spyware attacks

23 Feb

Italy: cybercrime operations across the peninsula A resurgence of activity linked to a thread hijacking campaign documented in December 2025 has recently been identified. The campaign targets organizations based in...

Ransomware and phishing in Italy, new Asia-based state-sponsored activity, Cisco and Fortinet 0-days

26 Jan

Italy: new cybercrime attacks New operations linked to a phishing campaign themed around the renewal of the health insurance card have been identified in Italy, initially reported on January 8, 2026. The theme has proven...

Critical vulnerabilities in n8n, Italy in the crosshairs of phishing and ransomware activity, the latest from China

09 Jan

n8n: critical vulnerabilities with high operational impact In recent days, the open-source workflow automation platform n8n has been in the spotlight following the disclosure and analysis of multiple critical vulnerabilities,...

New attacks in Italy, data breaches reported, offensives from China

05 Jan

Italy: new phishing and ransomware offensives Over the past two weeks, multiple phishing campaigns have targeted Italian users. One operation abused the name and logo of Fineco Bank. In particular, a fraudulent email with the subject “Confirmation of...

Updates on React2Shell exploitation, the latest from Beijing and Tehran, new attacks in Italy

12 Dec

React2Shell: EtherRAT and other malware delivered in state-sponsored and cybercrime activity During a recent attack based on the exploitation of the critical vulnerability CVE-2025-55182 (known as React2Shell), security researchers identified...

Phishing and ransomware in Italy, global data breaches, new state-sponsored operations

09 Dec

Italy: offensive cybercrime hits the country A new phishing campaign targeting Italian users has been identified, leveraging the name and visual identity of the Italian Government and the Presidency of...