A new phishing attack is spreading in Poland and Germany, delivering a stealthy backdoor called TorNet. Linked to an APT group, this malware uses the TOR network to evade detection and maintain covert control over infected systems.

Following the seizure of the gang's infrastructure, Khoroshev has been sanctioned by the UK, US, and Australia. Despite his previous confidence in his anonymity, evidenced by a $10m reward offer for his identity, the US is now offering the same amount for information leading to his arrest or conviction. LockBit, known for targeting major companies like Royal Mail and Boeing, saw its operations significantly weakened after a global law enforcement crackdown. The NCA reports that the gang's rebuilding efforts have resulted in a less sophisticated and less impactful operation. Khoroshev remains at large, likely due to Russia's non-cooperation in extraditing cybercriminals.

Since its emergence in April 2022, Black Basta ransomware has rapidly become one of the most formidable cyber threats globally. According to Techradar, in just two years, it has compromised over 500 organizations, impacting critical sectors such as healthcare.