Account required
Sign in to view threat intelligence
CTI data is restricted to registered users. Create a free account to browse the dashboard, then upgrade to a paid plan to unlock event details and IOCs.
Cyber Threat Intelligence
Daily snapshot
Daily brief 18 June 2026
DragonForce Abuses Teams, INC Ransomware Surge, Evil Corp Botnet Hit
INC ransomware claims 830+ victims since 2023; DragonForce abuses Microsoft Teams for C2; Evil Corp's SocGholish disrupted; 40 critical data exposures tracked.
Events
0
In current view
Critical exposure
0
Last 24 hours
0
vs previous 24h
Distinct actors
0
In current view
By attack category · 9
Data Exposure
0
Ransomware
0
Access Brokerage
0
DDoS
0
Web Defacement
0
Malware Ops
0
Vulnerability
0
Threat Alert
0
Cyber Operation
0
Top victim countries
No country data in this view.
Subscriber-only
CTI brief — 2026-06-18
The CTI dashboard tracks dark-web disclosures, ransomware claims, data leaks and active threat actors. Full event list, threat-actor profiles and historical archive are available to subscribers.
Events
showing 0
Category
Title
Actor
Country
Date
- Data BreachAlleged data breach of Ma Gestion LocativeChimeraZFrance18 Jun
- DDoSYEMEN CYBER GROUP targets the website of Holyland YeshivaYEMEN CYBER GROUPIsrael18 Jun
- Malware OpsAlleged sale of a Windows local privilege escalation exploit with UAC bypassSiriusB—18 Jun
- Web DefacementZod targets the website of Ly Cong UanZodVietnam18 Jun
- RansomwareMakel Elektrik falls victim to Qilin RansomwareQilinTurkey18 Jun
- RansomwareKirbor Homes falls victim to PEAR ransomwarePEARUnited States18 Jun
- Access BrokerageAlleged sale of unauthorized admin access to a WordPress based shop in ItalyReveItaly18 Jun
- RansomwareRelease Marine, Inc falls victim to PEAR ransomwarePEARUnited States18 Jun
- DDoSBD Anonymous targets the website of Qatar Ministry of InteriorBD AnonymousQatar18 Jun
- RansomwareB & B Trading falls victim to PEAR ransomwarePEARUnited States18 Jun
- Web Defacement0xfay targets the website of Hosho General Trading Agencies FZCO0xfayUnited Arab Emirates18 Jun
- RansomwareSelect Wines falls victim to BravoX ransomwareBravoXCanada18 Jun
- RansomwareLawson Roofing falls victim to Rhysida ransomwareRHYSIDAUnited States18 Jun
- DDoSRipperSec targets the website of Israel Science FoundationRipperSecIsrael18 Jun
- Threat AlertWe are Cardinal claims to target GermanyWe are CardinalGermany18 Jun
- RansomwareThe Gentlemen Ransomware group has added an unidentified victimThe Gentlemen—18 Jun
- Web DefacementEXADOS targets the website of Travelogue Agency Co., LtdEXADOSThailand18 Jun
- Data LeakAlleged data leak of Indian GovernmentMosad LeaksIndia18 Jun
- Data LeakAlleged leak of Russian GovernmentMosad LeaksRussia18 Jun
- Data LeakAlleged leak of USA TS DocsMosad LeaksUnited States18 Jun
- Web DefacementEXADOS targets the website of Niramit Holidays & Business Travel Co.,LtdEXADOSThailand18 Jun
- Web DefacementEXADOS targets the website of InnoAce Co., LtdEXADOSSouth Korea18 Jun
- Web DefacementEXADOS targets the website of Hermes holidayEXADOSThailand18 Jun
- Web DefacementEXADOS targets the website of iStyle TravelerEXADOSSouth Korea18 Jun
- Web DefacementTHE HACK_ANGEL targets the website of shalibhadra groupTHE HACK_ANGELIndia18 Jun
- RansomwareDRC falls victim to LOCKBIT 5.0 RansomwareLOCKBIT 5.0Turkey18 Jun
- RansomwareDR.Wu Skincare Co Ltd falls victim to LOCKBIT 5.0 ransomwareLOCKBIT 5.0Taiwan18 Jun
- Web DefacementMasoud Invisible targets the website of Alu DycoMasoud InvisibleIndia18 Jun
- RansomwareDaikyou Nishikawa Co., Ltd. falls victim to LOCKBIT 5.0 RansomwareLOCKBIT 5.0Japan18 Jun
- Web DefacementEXADOS targets the website of Happy KoreaEXADOSSouth Korea18 Jun
- Web DefacementEXADOS targets the website of WORLD STAR HOLIDAYEXADOSThailand18 Jun
- Web DefacementKosameAmegai targets the website of Merlion Tools Pvt LtdKosameAmegaiIndia18 Jun
- RansomwareCOMO Furniture Enterprises Co., Ltd falls victim to LOCKBIT 5.0 RansomwareLOCKBIT 5.0Taiwan18 Jun
- RansomwareFeliz Hotel Boracay falls victim to LOCKBIT 5.0 ransomwareLOCKBIT 5.0Philippines18 Jun
- Web DefacementEXADOS targets the website of NICE TRIPEXADOSThailand18 Jun
- RansomwareBotswana Vaccine Institute falls victim to LOCKBIT 5.0 RansomwareLOCKBIT 5.0Botswana18 Jun
- Data Breachpenus.krdu1ku1912Iraq18 Jun
- Access BrokerageAlleged unauthorized access to Automated Water Level Maintenance System at TurkeyArmenian codeTurkey18 Jun
- Access BrokerageAlleged login access to Suan Sunandha Rajabhat UniversityH3C4KEDZThailand18 Jun
- Web DefacementAXX6GHOST targets the website of chools.inAXX6GHOSTIndia18 Jun
- Data BreachAlleged data breach of Central Polytechnic CollegeV FOR VENDETTA CYBER TEAMIndia18 Jun
- RansomwareApptricity Corporation falls victim to Akira ransomwareakiraUnited States18 Jun
- Access BrokerageAlleged unauthorized access to video surveillance system in FranceNoName057(16)France18 Jun
- RansomwareBerg Lilly, PC falls victim to Akira ransomwareakiraUnited States18 Jun
- DDoSRipperSec targets the website of Standards Institution of IsraelRipperSecIsrael18 Jun
- Web Defacement#OpsRePwned targets the website of Ekamra Skating Academy (ESA)#OpsRePwnedIndia18 Jun
- RansomwareEasterseals Iowa falls victim to Lynx ransomwareLynxUnited States18 Jun
- Web DefacementTEAM EXE targets the website of Punjabhai Patel College of EducationTEAM EXEIndia18 Jun
- Web Defacement./X140N targets the website of Indian Industries Association./X140NIndia18 Jun
- RansomwareTy Thac Co., Ltd. falls victim to The Gentlemen ransomwareThe GentlemenTaiwan18 Jun
- Web DefacementCYBER-71 targets the website of Tourism and Hospitality Skill Council (THSC)CYBER-71India18 Jun
- RansomwareCOFAQ Group falls victim to The Gentlemen ransomwareThe GentlemenFrance18 Jun
- RansomwareSertrans falls victim to The Gentlemen ransomwareThe GentlemenSpain18 Jun
- RansomwareBurris & MacOmber, PLLC falls victim to The Gentlemen ransomwareThe GentlemenUnited States18 Jun
- RansomwareYudu Technology falls victim to The Gentlemen ransomwareThe GentlemenTaiwan18 Jun
- RansomwareAMIGEST falls victim to The Gentlemen ransomwareThe GentlemenFrance18 Jun
- RansomwareSouthern Mechanical Contractors INC falls victim to Lynx ransomwareLynxUnited States18 Jun
- RansomwareTERRIO Therapy-Fitness falls victim to The Gentlemen ransomwareThe GentlemenUnited States18 Jun
- RansomwareStanley and Global Solutions Sdn Bhd falls victim to The Gentlemen ransomwareThe GentlemenMalaysia18 Jun
- RansomwareAlexander Buch Bilanzbuchhalter falls victim to The Gentlemen ransomwareThe GentlemenGermany18 Jun
- Data LeakAlleged sale of Financial Research and Investment Newsletter Publisher DatabaseHey—18 Jun
- RansomwareVERA CHIMIE falls victim to The Gentlemen ransomwareThe GentlemenFrance18 Jun
- Data LeakAlleged Sale of German Consumer Email DatabaseRaikouGermany18 Jun
- Data LeakAlleged Data leak of Cuties AIBlastoise—18 Jun
- Malware OpsAlleged sale of Millennium RAT V4.3monii—18 Jun
- Access BrokerageAlleged leak of login Access to Damascus UniversityTEAM R99 HACKERSSyria18 Jun
- Web DefacementHax.or targets the website of quickdeskbiz.comHax.or—18 Jun
- Access BrokerageAlleged unauthorized access to Odessa Oblast Councilpol4rityUkraine18 Jun
- Access BrokerageAlleged leak of login Access to GO2bankJAX7United States18 Jun
- Data BreachAlleged Data Breach of ToqueSensitive2025Argentina18 Jun
- Access BrokerageAlleged Sale of Unauthorized Access to Cryptocurrency Platform Developerdred871—18 Jun
- Web DefacementZxS3C targets the website of Nakhon Pathom Technical CollegeZxS3CThailand18 Jun
- Threat AlertEXILIADOS #555 claims to target Renta NacionalEXILIADOS #555Chile18 Jun
- DDoSNoName targets the website of ArcepNoName057(16)France18 Jun
- DDoSNoName targets the website of High Commission of the RepublicNoName057(16)France18 Jun
- DDoSNoName targets the website of City of DunkirkNoName057(16)France18 Jun
- DDoSNoName targets the website of State services in MoselleNoName057(16)France18 Jun
- DDoSNoName targets the website of Prefecture of Bouches-du-RhôneNoName057(16)France18 Jun
- Threat AlertAlleged sale of OrcaHunter FrameworkOrcinus orca—18 Jun
- DDoSNoName targets the website of Prefecture of Seine-MaritimeNoName057(16)France18 Jun
- DDoSNoName targets the website of EurencoNoName057(16)France18 Jun
- Data BreachAlleged Data Breach of BestFriendMatchSensitive2025United States18 Jun
- RansomwareHorizon Family Medical Group falls victim to INC RANSOM RansomwareINC RANSOMUnited States18 Jun
- Data BreachAlleged data breach of Renta NacionalCortex-groupChile18 Jun
- Web DefacementZxS3C targets the website of Navamintrachinutit Suankularb Wittayalai Pathum Thani SchoolZxS3CThailand18 Jun
- Data BreachAlleged Data Breach of TIMER IMMOBILIER0xSecFrance18 Jun
- Data LeakAlleged Sale of twitter databaseverticalmartenkbsh—18 Jun
- RansomwareAlleged data breach of One MedicalShinyHuntersUnited States18 Jun
- Data BreachAlleged data leak of YoremiaBlack0ut_ExiMexico18 Jun
- RansomwareAlleged data breach of National Association of Insurance CommissionersShinyHuntersUnited States18 Jun
- DDoSDark Storm Team targets the website of Ministry of Finance, Saudi ArabiaDark Storm TeamSaudi Arabia18 Jun
- RansomwareWolf Construction Services falls victim to LYNX ransomwareLynxUnited States18 Jun
- DDoSDark Storm Team targets the website of Balady PlatformDark Storm TeamSaudi Arabia18 Jun
- DDoSDark Storm Team targets the website of Ministry of Interior - KSADark Storm TeamSaudi Arabia18 Jun
- DDoSDark Storm Team targets the website of Eastern Province MunicipalityDark Storm TeamSaudi Arabia18 Jun
- DDoSDark Storm Team targets the website of Ministry of Education, Saudi ArabiaDark Storm TeamSaudi Arabia18 Jun
- DDoSDark Storm Team targets the website of Jeddah Governorate Municipality Electronic PortalDark Storm TeamSaudi Arabia18 Jun
- DDoSDark Storm Team targets the website of King Khalid InternationalDark Storm TeamSaudi Arabia18 Jun
- Access BrokerageAlleged leak of login access to Thailand's Learning Management System of PSUZxS3CThailand18 Jun
- DDoSDark Storm Team targets the website of King Fahd International AirportDark Storm TeamSaudi Arabia18 Jun
- DDoSDark Storm Team targets the website of Riyadh AirportsDark Storm TeamSaudi Arabia18 Jun
- DDoSDark Storm Team targets the website of Bank AlbiladDark Storm TeamSaudi Arabia18 Jun
- DDoSDark Storm Team targets the website of Saudi National PortalDark Storm TeamSaudi Arabia18 Jun
- Access BrokerageAlleged leak of login access to Sukhothai Thammathirat Open University (STOU) in ThailandZxS3CThailand18 Jun
- DDoSDark Storm Team targets the website of SUMY TELECOMSYSTEMSDark Storm TeamUkraine18 Jun
- DDoSDark Storm Team targets the website of TriolanDark Storm TeamUkraine18 Jun
- VulnerabilityDark Storm Team targets multiple domains of Indonesia's Bogor Single WindowBROTHERHOOD CAPUNG INDONESIAIndonesia18 Jun
- Access BrokerageAlleged Sale of Unauthorized Access to Sniffed cardsEmperorcvv—18 Jun
- DDoSDark Strom Team targets the website of Ukraine MaybuttyaDark Storm TeamUkraine18 Jun
- DDoSDark Storm Team targets the website of Ukraine State Research and Design Shipbuilding CenterDark Storm TeamUkraine18 Jun
- DDoSDark Strom Team targets the website of Kryvyi Rih TeplotsentralDark Storm TeamUkraine18 Jun
- DDoSDark Strom Team targets the website of KRUK UAV Operator Training CenterDark Storm TeamUkraine18 Jun
- Data BreachAlleged data leak of Portal KaltimMatxCysecIndonesia18 Jun
- Data LeakAlleged Leak of linkedin and email databaseOriginalCrazyOldFart—18 Jun
- DDoSDark Storm Team targets the test website of Kharkiv Aggregate Design BureauDark Storm TeamUkraine18 Jun
- Access BrokerageAlleged leak of login access to Indonesian Regional Government Information SystemBhayangkaraIDIndonesia18 Jun
- RansomwareNEUWOGES falls victim to INC RANSOM ransomwareINC RANSOMGermany18 Jun
- Data BreachAlleged leak of scraped TikTok user databaserobinhood420United States18 Jun
- Data BreachAlleged data breach of Central Bank of VenezuelaGordonFreemanVenezuela18 Jun
- Data LeakAlleged sale of IronBodyFit databaseshabatFrance18 Jun
- RansomwareMassachusetts Staffing Association falls victim to GENESIS ransomwareGENESISUnited States18 Jun
- RansomwareAssociated Builders and Contractors Indiana/Kentucky falls victim to GENESIS ransomwareGENESISUnited States18 Jun
- Data LeakAlleged sale of Ronis Customer databaseTanakaAustralia18 Jun
- Access BrokerageAlleged sale of unauthorized access to Italian Logistics companySaturned33Italy18 Jun
- Data BreachAlleged leak of Groupe MBM databasePlazaEuFrance18 Jun
- Data BreachAlleged data breach of Pakistan Military IntelligenceRuhiPakistan18 Jun
- Data BreachAlleged data breach of SeNaSaalecc157Dominican Republic18 Jun
- Malware OpsAlleged sale of Trillium Security MultiSploit Toolchmod777—18 Jun
- Malware OpsAlleged sale of VEGA Stealerzandercommander—18 Jun
- Data LeakAlleged sale of credit card data from multiple countriesurbsnv—18 Jun
- Web DefacementAntonkill targets the website of Department of Skills Development (Malaysia)AntonkillMalaysia18 Jun
- Data LeakAlleged leak of real estate dataOriginalCrazyOldFart—18 Jun
- Data BreachAlleged data breach of TakTikimmoChimeraZFrance18 Jun
- Data LeakAlleged sale of credit card data from Brazilcx2islifeBrazil18 Jun
- Data BreachAlleged data sale of Elina Medical Weight Loss2019Australia18 Jun
- RansomwareSEI NORDOVEST srl falls victim to SafePay RansomwareSAFEPAYItaly18 Jun
- RansomwareGeorg Goerdt Zaunsysteme GmbH falls victim to SAFEPAY RansomwareSAFEPAYGermany18 Jun
- RansomwareHarcourts falls victim to SafePay RansomwareSAFEPAYNew Zealand18 Jun
- RansomwareB.R.S. Cappuccio s.r.l. falls victim to SafePay ransomwareSAFEPAYItaly18 Jun
- RansomwareGut Heckenhof Hotel & Golfresort an der Sieg falls victim to SAFEPAY RamsomwareSAFEPAYGermany18 Jun
- Access BrokerageAlleged leak of login access to ThaiTicketMajor Company LimitedDr.Nexusec-CyberThailand18 Jun
- Data LeakAlleged sale of Thai police webmailscozypandasThailand18 Jun
- Data BreachAlleged data breach of Ministerio de SaludvLeakzArgentina18 Jun
- RansomwareGreat Foods, Inc. falls victim to LAMASHTU RansomwareLAMASHTUEgypt18 Jun
- Data LeakAlleged leak of Amazon S3 bucket data from an unidentified organizationOriginalCrazyOldFart—18 Jun
- Data LeakAlleged sale of bank leads from USAsmileycrackUnited States18 Jun
- Malware OpsAlleged sale of sale of ClickFix loaderconductor001—18 Jun
- RansomwareeurOptimum falls victim to PLAY RansomwarePLAYUnited States18 Jun
- RansomwareIntegrated Technologies Corporation falls victim to PLAY RansomwarePLAYUnited States18 Jun
- RansomwareLaw Office of Greg D. Crosslin falls victim to PLAY RansomwarePLAYUnited States18 Jun
- Data LeakAlleged leak of insurance policy and customer dataOriginalCrazyOldFartUnited States18 Jun
- Access BrokerageAlleged leak of login access to Charoen Sub Charoen Kit Co., Ltd.Dr.Nexusec-CyberThailand18 Jun
- Data LeakAlleged sale of Argentina Police Internal Directoryoverdose4uArgentina18 Jun
- Access BrokerageAlleged leak of login access to The Institute for the Promotion of Teaching Science and TechnologyNXBB.SECThailand18 Jun
- Data BreachAlleged database sale of TellmebyeSophiaSpain18 Jun
- Data BreachAlleged data sale of VNIIRRhodesRussia18 Jun
- Access BrokerageAlleged sale of unauthorized access to an unidentified shopvu1nerability—18 Jun
- Access BrokerageAlleged sale of web shell access to unidentified organization in MalaysiaDeepCore NetworkMalaysia18 Jun
- Web DefacementDeepCore Network targets the website of LaserTOTsDeepCore NetworkCanada18 Jun
- Access BrokerageAlleged leak of login access to KCE Vendor PortalNXBB.SECThailand18 Jun
- Data BreachAlleged data sale of Medelita0xulnarUnited States18 Jun
- Data BreachAlleged data breach of ImplosaPlazaEuPanama18 Jun
- Data BreachAlleged data breach of Groupe MBMPlazaEuFrance18 Jun
No events match your filters.
Page 1 of 1
Active threat actors
click any actor to filter the list aboveNo active actors in this view.