The Good, the Bad and the Ugly in Cybersecurity – Week 20

SUMMARY :

This intelligence update covers recent cybersecurity events. In positive developments, global authorities disrupted a major botnet, arrested a ransomware actor, and dismantled a dark web marketplace. On the negative side, a malicious NPM package was discovered hiding multi-stage malware using Unicode and Google Calendar. The most concerning development involves cyberspies exploiting a zero-day vulnerability in Output Messenger to target Kurdish military users in Iraq, showcasing increased capabilities of the Marbled Dust threat group.

OPENCTI LABELS :

ransomware,botnet,zero-day,npm,dns hijacking,dark web,cve-2025-27920,omserverservice.exe,omclientservice.exe,output messenger,kurdish military,doppelpaymer


Open in NetmanageIT OpenCTI Public Instance with below link!


Use public read only username and password on login page.

NOTE : Use Public READ only user credentials on login page banner.


The Good, the Bad and the Ugly in Cybersecurity – Week 20