Threat Intelligence Center

Interpol has announced the results of a coordinated international cybercrime enforcement operation resulting in 5,800 arrests across 97 countries. This large-scale action targets organized financial crime networks, fraud schemes, and cybercriminal infrastructure operating globally.

Huntress researchers have identified vibe-coded malware being deployed in Active Directory attack chains that leverage compromised information gathering scripts, SharpShares, and s5cmd tooling. This multi-stage attack targets the reconnaissance phase of Active Directory compromise, allowing attackers to enumerate network resources and credentials before lateral movement.

Security researchers have identified a scan-and-brute-force bot campaign attributed to threat actor Alex targeting professional service firms, including medical, legal, and accounting practices. This campaign uses automated scanning tools to identify exposed services and weak credentials, enabling lateral movement and unauthorized access.

Interlock ransomware operators have successfully targeted drug and alcohol treatment services, resulting in a significant data breach settlement. This attack underscores the healthcare sector's exposure to sophisticated ransomware campaigns and the substantial legal and financial consequences of inadequate data protection.

Account takeover (ATO) campaigns have fundamentally shifted tactics. Rather than attempting to crack passwords or exploit weak authentication, threat actors are now targeting the verification step—the moment when users prove their identity to gain access. This evolution reflects attacker sophistication and the widespread deployment of multi-factor authentication across regulated industries.

The Department of Health and Human Services has postponed the implementation deadline for major HIPAA Security Rule changes, providing healthcare organizations with extended time to achieve compliance. This regulatory shift affects covered entities and business associates across the healthcare sector, particularly those managing electronic protected health information.