Sofacy Archivi

OT attacks and cyber breaches, APT and cyberspionage campaigns, AI frameworks and emerging threats

Cyberattacks and compromises: from industrial systems to digital platforms Between 1 and 2 November 2026, a series of cyberattacks affected refrigeration systems at supermarkets and commercial businesses in several European...

PHP2Shell and new ITW exploits, APT and cyberspionage operations, the latest from Italy

23 Oct

Vulnerabilities: active exploitation of vulnerabilities in PHP, Plex, Siemens, Nextcloud and BeyondTrust During the week, the landscape of vulnerabilities exploited in the wild (ITW) was marked by an intensification of...

New ITW-exploited vulnerabilities, breaches and international law enforcement activity, new global APT operations

07 Sep

Vulnerabilities: 0-days and ITW flaws On August 28, 2026, PaperCut released a second emergency patch (Emergency Patch Release 2) for versions 24, 25 and 26 in relation to the 0-day...

Novel APT Operations, In-the-Wild Exploits and New 0-Days, High-Profile Compromises

31 Jul

APT: new operations conducted across Eurasia and the Middle East Since at least July 2025, the Russian state-sponsored group Void Blizzard (also known as Laundry Bear, CL-STA-1114, and TA488) has...

The latest from Italy, emerging APT operations, newly announced breaches, and law enforcement activity

13 Jul

Italy: malware, smishing, and ransomware activity On July 9, 2026, security researchers identified a campaign in Italy impersonating the UniCredit brand by promoting a fake banking rewards program designed to...

Updates in cybercrime, the latest from Italy, several ITW exploits emerged

04 May

Cybercrime: several global campaigns reported A group called UNC6692 conducted a multi-stage intrusion campaign – based on social engineering techniques and a modular suite of custom malware called SNOW –...

Latest from Italy, updates in the state-sponsored landscape, ransomware and leaks

10 Apr

Italy: several malicious activities observed In the past week, several offensives have targeted Italian entities. Specifically, Microsoft reported an advanced phishing campaign exploiting the legitimate “device code flow” authentication mechanism...

DDoS and ransomware in Italy, supply-chain attacks, new Russian offensives

09 Feb

Italy: attacks on various portals linked to the Winter Olympic Games, with ransomware claims After targeting German and Ukrainian entities, the pro-Russian collective NoName057(16) redirected its DDoS attacks against several...

Recent attacks in Italy, new malware developments, Ukraine hit by malicious campaigns

20 Oct

Italy: New offensives hit the country The Israeli-made spyware Graphite, developed by Paragon Solutions, has reportedly infected the devices of Italian businessman Francesco Gaetano Caltagirone and UniCredit CEO Andrea Orcel....

APTs between East and West, malware news, three 0-days exploited in malicious campaigns

13 Oct

APT: State-sponsored campaigns detected around the globe This week, multiple campaigns by various state-sponsored adversaries were tracked worldwide. In Russia, the Sandworm subgroup known as Seashell Blizzard targeted critical infrastructure...