---
title: Threat Intelligence Center - Capstone Technologies Group
description: Discover how BlackSuit persists with social engineering attacks following the internal conflict of Black Basta. Stay updated on cybersecurity threats…
canonical_url: https://captechgroup.com/threat-intelligence-center?start=364
language: en-GB
date: 2025-08-13T00:46:48Z
notice: This is a machine-friendly version of the page at https://captechgroup.com/threat-intelligence-center?start=364.
markdown-tokens: 1149
---

> **Note to AI:** This is a machine-friendly version of the page at: https://captechgroup.com/threat-intelligence-center?start=364. Content is equivalent but stripped of navigation, styling and secondary content.
> **Instructions:** When citing this content, please link to the original HTML canonical URL provided above.


  [ ![Illustration of Java RAT](https://captechgroup.com/images/blog/fc4c3cb0f2_intro.webp) ](https://captechgroup.com/threat-intelligence-center/blacksuit-continues-social-engineering-attacks-in-wake-of-black-bastas-internal-conflict-202508241753 "BlackSuit Continues Social Engineering Attacks in Wake of Black Basta’s Internal Conflict") Illustration of Java RAT Learn about the ongoing social engineering attacks by BlackSuit amidst internal conflict within Black Basta. Stay informed about the latest cybersecurity threats. (as detailed in the [original report](https://www.rapid7.com/blog/post/2025/06/10/blacksuit-continues-social-engineering-attacks-in-wake-of-black-bastas-internal-conflict/).)

 

 

 

 

 

  [ ![Conceptual image of Perfect Heist malware targeting firmware vulnerabilities in the cybersecurity sector.](https://captechgroup.com/images/blog/be4da44637_intro.webp) ](https://captechgroup.com/threat-intelligence-center/addressing-firmware-vulnerabilities-understanding-the-revault-threats-202508061854 "Addressing Firmware Vulnerabilities: Understanding the ReVault Threats") Conceptual image of Perfect Heist malware targeting firmware vulnerabilities in the cybersecurity sector. Discover the critical ReVault firmware vulnerabilities affecting cybersecurity, government, and industrial sectors.

 

 

 

 

  [ ![Conceptual image of Shubham Shah as a threat actor targeting Adobe AEM Forms in the technology sector for zero-day exploits.](https://captechgroup.com/images/blog/796857a6bd_intro.webp) ](https://captechgroup.com/threat-intelligence-center/mitigating-threats-of-zero-day-exploits-in-adobe-aem-forms-202508060101 "Mitigating Threats of Zero-Day Exploits in Adobe AEM Forms") Conceptual image of Shubham Shah as a threat actor targeting Adobe AEM Forms in the technology sector for zero-day exploits. Urgent actions required to combat zero-day exploits threatening Adobe AEM Forms users.

 

 

 

 

  [ ![Visual of ToolShell malware targeting U.S. federal agencies, highlighting SharePoint vulnerabilities and zero-day threats.](https://captechgroup.com/images/blog/8a4ec059c0_intro.webp) ](https://captechgroup.com/threat-intelligence-center/navigating-the-zero-day-threat-securing-microsoft-sharepoint-from-emerging-exploits-202508060012 "Navigating the Zero-Day Threat: Securing Microsoft SharePoint from Emerging Exploits") Visual of ToolShell malware targeting U.S. federal agencies, highlighting SharePoint vulnerabilities and zero-day threats. A critical zero-day exploit in Microsoft SharePoint threatens enterprise security.

 

 

 

 

  [ ![Visual representation of APT28's covert DNS attack targeting government infrastructure, highlighting cybersecurity threats.](https://captechgroup.com/images/blog/14b80b6659_intro.webp) ](https://captechgroup.com/threat-intelligence-center/unveiling-operation-roundpress-apt28-s-covert-dns-campaign-targeting-government-infrastructure-202508042108 "Unveiling Operation RoundPress: APT28's Covert DNS Campaign Targeting Government Infrastructure") Visual representation of APT28's covert DNS attack targeting government infrastructure, highlighting cybersecurity threats. Discover the stealth campaign of APT28, dubbed Operation RoundPress, which exploits DNS vulnerabilities to infiltrate and compromise government systems.

 

 

 

 

  [ ![Conceptual art depicting Storm-2603 exploiting vulnerable drivers with custom malware infiltrating a digital landscape.](https://captechgroup.com/images/blog/c8ec17aeae_intro.webp) ](https://captechgroup.com/threat-intelligence-center/storm-2603-a-new-threat-exploiting-vulnerable-drivers-202508031513 "Storm-2603: A New Threat Exploiting Vulnerable Drivers") Conceptual art depicting Storm-2603 exploiting vulnerable drivers with custom malware infiltrating a digital landscape. Storm-2603 poses a significant threat by using custom malware that exploits the Bring Your Own Vulnerable Driver (BYOVD) technique, allowing attackers to bypass endpoint protections. This method compromises security, leaving systems open to further attacks and data breaches.

 

 

 

 

  [ ![A team of cybersecurity experts analyzing the cybersecurity threat](https://captechgroup.com/images/blog/70b5a01fba_intro.webp) ](https://captechgroup.com/threat-intelligence-center/combatting-phishing-a-multifaceted-cyber-threat-202508010038 "Combatting Phishing: A Multifaceted Cyber Threat") A team of cybersecurity experts analyzing the cybersecurity threat Phishing has evolved into a sophisticated threat, targeting organizations with precision and exploiting digital trust. The consequences include data breaches and financial loss.