ScarCruft Archivi

Italy targeted by multiple adversaries, developments in the APT landscape, vulnerabilities exploited ITW

Italy: several malicious activities observed A phishing campaign has been detected in Italy that abuses the identity of the Postal Police’s Online Public Security Office (Commissariato di P.S. Online) to...

New attacks in Italy, novel APT operations, reported data breaches

20 Apr

Italy: multiple malicious activities observed A phishing campaign has been detected in Italy leveraging the name of the Agenzia delle Entrate–Riscossione with the aim of stealing login credentials belonging to...

Ransomware and phishing in Italy, new Asia-based state-sponsored activity, Cisco and Fortinet 0-days

26 Jan

Italy: new cybercrime attacks New operations linked to a phishing campaign themed around the renewal of the health insurance card have been identified in Italy, initially reported on January 8, 2026. The theme has proven...

Developments in the APT landscape, new campaigns and previously unseen malware, multiple data breaches reported

18 Jan

APT: North Korean, Iranian, and Ukraine-focused operations tracked Between August and November 2025, security researchers identified a new campaign by the North Korean group ScarCruft, dubbed Artemis, aimed at distributing...

New attacks in Italy, state-sponsored activity, operations in Ukraine

17 Nov

Italy: cybercrime operations target the country During the past week, several phishing campaigns targeting Italy were identified. In one case, a fake login portal for students and staff of the...

Italy targeted by multiple adversaries, new APT operations, latest developments in cybercrime

10 Nov

Italy: DDoS, phishing, and ransomware attacks detected, along with BadCandy distribution During the first weekend of the month, NoName057(16) continued to claim DDoS attacks against the following Italian targets: the...