Wow, RedCurl is apparently dabbling in ransomware now? 
Seriously unexpected, right? I always had them pegged as the data theft specialists. The ransomware they're using is reportedly called QWCrypt.
It just goes to show you – even established APT groups aren't afraid to switch up their playbook. Let's face it, ransomware has become incredibly profitable, hasn't it?
This really drives home why robust security measures are absolutely non-negotiable. We're talking about consistent employee training, staying on top of patching, and, crucially, conducting *actual* penetration tests. And just to be crystal clear: automated scans are helpful, sure, but they simply aren't a substitute for a thorough, real-deal pentest!
So, what about you? Have you seen other threat actors making similar surprising shifts in their strategies lately? I'd love to hear what you've observed. Share your thoughts below! 
Ready to dive into the latest threats and breaches making headlines? 
FamousSparrow's Return: The Chinese government-backed hacking group is back, targeting organizations in North America. Important distinction: ESET insists on tracking them separately from Salt Typhoon. Remember to prioritize TTPs and IOCs/IOAs accordingly!
RedCurl's Ransomware Twist: This corporate espionage group is now deploying "QWCrypt" ransomware, targeting Hyper-V servers. Phishing emails with malicious IMG attachments are the initial attack vector.
StreamElements Data Breach: A third-party service provider suffered a breach, exposing data of 210,000 customers.!
NSW Court System Data Theft: Sensitive documents, including AVOs, were stolen from the NSW Online Registry website. This could have serious consequences for victims of domestic violence.
NYU Website Defacement: A hacker compromised NYU's website, leaking personal data of over 1 million students. Even with good intentions, the collateral damage is unacceptable.
Defense Contractor Fined: MORSE Corp will pay millions for failing to meet federal cybersecurity requirements. Third-party risk management is crucial!
Atlantis AIO Automates Credential Stuffing: This new platform automates credential stuffing attacks against 140 online services. Stay vigilant against brute force attacks!
Chrome Zero-Day Exploited: Google patched a zero-day vulnerability exploited in espionage campaigns targeting Russian organizations. Keep your browsers updated!
UK Warns of 'Com Networks': The UK's NCA is warning of a growing threat from online networks of teenage boys who are "dedicated to inflicting harm and committing a range of criminality." A very worrying trend that we need to be aware of.
