Tag: financially motivated threats
4 articles
Microsoft Teams Impersonation Attacks Deploy Chaos Ransomware
Cyber attackers are impersonating IT helpdesk staff on Microsoft Teams to trick employees into installing ransomware, with one financially motivated operation deploying Chaos ransomware in a matter of minutes. They use convincing voice calls and chats to gain remote access, often within just 2-3 minutes.
Chinese Cybercrime Group TA4922 Expands Global Reach
Stay vigilant, organizations worldwide: a rapidly evolving Chinese cybercrime group, TA4922, is expanding its global footprint, rewriting the rules for corporate network exploitation and monetization. From East Asia to the UK, Germany, and beyond, this financially driven threat actor is localizing its attacks to hit closer to home.
Chinese Hackers Deploy Atlas RAT in Europe With Heightened Cyberattacks
Chinese hackers have significantly ramped up cyberattacks in Europe, with a financially motivated group, tracked as TA4922, launching a high volume of unique campaigns targeting countries including Germany, Italy, and the UK. This surge in activity, which began in March, has been marked by unprecedented diversity in tactics and objectives, including fraud, data theft, and network breaches.
New Extortion Crews Mimic Scattered Spider Tactics in Rapid Attacks
New extortion crews, Cordial Spider and Snarky Spider, are rapidly carrying out data-theft-for-extortion campaigns, closely mimicking the tactics of notorious group Scattered Spider. These financially motivated groups, tied to The Com, have been targeting US-based organizations since October 2025.