ScarCruft Archivi

Attacks targeting Italy, APT and cyberspionage campaigns, new vulnerabilities exploited ITW

Italy: DDoS attacks, ransomware and smishing operations Over the past week, the pro-Russian collective NoName057(16) once again turned its attention to Italy, targeting several portals, including: Municipality of Bari; DGS...

BlueMoon used in espionage campaigns, the latest developments on the APT front, global cybercrime activity and operations targeting Italy

11 Sep

BlueMoon: 0-day exploit kit rapidly adopted in espionage campaigns Between late August and early September 2026, BlueMoon, a new exploit kit used by espionage-focused groups in targeted spear phishing campaigns,...

Italy Targeted by Multiple Adversaries, Developments in the APT Landscape, Vulnerabilities Exploited ITW

17 Jul

Italy: multiple Malicious Activities Observed Several malicious activities targeting Italy have been identified. A smishing campaign was detected leveraging the theme of a purported failed delivery in the name of...

The latest from Italy, emerging APT operations, newly announced breaches, and law enforcement activity

13 Jul

Italy: malware, smishing, and ransomware activity On July 9, 2026, security researchers identified a campaign in Italy impersonating the UniCredit brand by promoting a fake banking rewards program designed to...

Italy targeted by multiple adversaries, developments in the APT landscape, vulnerabilities exploited ITW

19 Jun

Italy: several malicious activities observed A phishing campaign has been detected in Italy that abuses the identity of the Postal Police’s Online Public Security Office (Commissariato di P.S. Online) to...

New attacks in Italy, novel APT operations, reported data breaches

20 Apr

Italy: multiple malicious activities observed A phishing campaign has been detected in Italy leveraging the name of the Agenzia delle Entrate–Riscossione with the aim of stealing login credentials belonging to...

Ransomware and phishing in Italy, new Asia-based state-sponsored activity, Cisco and Fortinet 0-days

26 Jan

Italy: new cybercrime attacks New operations linked to a phishing campaign themed around the renewal of the health insurance card have been identified in Italy, initially reported on January 8, 2026. The theme has proven...

Developments in the APT landscape, new campaigns and previously unseen malware, multiple data breaches reported

18 Jan

APT: North Korean, Iranian, and Ukraine-focused operations tracked Between August and November 2025, security researchers identified a new campaign by the North Korean group ScarCruft, dubbed Artemis, aimed at distributing...

New attacks in Italy, state-sponsored activity, operations in Ukraine

17 Nov

Italy: cybercrime operations target the country During the past week, several phishing campaigns targeting Italy were identified. In one case, a fake login portal for students and staff of the...

Italy targeted by multiple adversaries, new APT operations, latest developments in cybercrime

10 Nov

Italy: DDoS, phishing, and ransomware attacks detected, along with BadCandy distribution During the first weekend of the month, NoName057(16) continued to claim DDoS attacks against the following Italian targets: the...