threat-intelligence
立場別 · 2 takes across the edition
The Record (Recorded Future) · United States · Operation Endgame guts the StealC, Amadey and SocGholish ransomware on-ramps
Frames the three malware families as 'cybercrime-as-a-service' on-ramps that seed ransomware and fraud, and reports Microsoft's parallel civil takedown of command-and-control infrastructure alongside the police action.
“Three cybercrime-as-a-service operations were undercut by Microsoft and law enforcement.”
Group-IB · Singapore · Ransomware reconsolidates around Qilin and 'The Gentlemen' as healthcare takes the hits
Technical breakdown of The Gentlemen's tactics and the 'hastalamuerte' operator's lineage from the Qilin affiliate crew ArmCorp, illustrating how shared TTPs transcend group branding after a defection.
“Hastalamuerte ran the ArmCorp crew inside Qilin before launching The Gentlemen independently.”