Dark Watch

Dark Watch follows active cyber threats, ransomware, malware, cybercrime, espionage, phishing and data breaches. Coverage focuses on how attacks develop, the systems and behaviours they exploit, and what defenders can learn from verified threat research, incident reporting and attacker activity—while clearly separating confirmed facts from unverified claims.

Purdue cybersecurity experts warn of evolving online scams leveraging AI techniques

Purdue University cybersecurity experts have raised alarms about the increasing sophistication of online scams, particularly those leveraging artificial intelligence (AI) techniques. Eugene Spafford, a...

Police arrest 16-year-old suspected of running KillSec ransomware group in Spain

Spanish authorities have arrested a 16-year-old suspected of leading the KillSec ransomware group, which is accused of stealing sensitive data from various organizations and...

Threat actors exploit ChatGPT Custom GPTs to deliver malware via ClickFix lures, infecting over 40 users

In a concerning development, threat actors have been exploiting ChatGPT Custom GPTs to deliver malware through ClickFix lures, infecting over 40 users. This activity,...

Star Blizzard evolves phishing tactics with new RedFlick malware delivery technique

In a significant evolution of its cyber operations, the Russian state-sponsored threat actor known as Star Blizzard has refined its phishing tactics and malware...

Dutch police arrest 24-year-old Pepijn van der Stap linked to ShinyHunters

Dutch authorities have arrested a 24-year-old man from Amsterdam, identified as Pepijn van der Stap, in connection with the notorious hacking group ShinyHunters. The...

Microsoft tracks Storm-2570’s consistent tactics across multiple ransomware deployments

Microsoft has identified Storm-2570, a ransomware affiliate, as a significant threat actor employing consistent tactics across various ransomware deployments, including Qilin, DragonForce, Anubis, and...

U.S. Soldier Sentenced to 70 Months for Hacking AT&T and Verizon, Stealing Data of Over 100 Million Customers

A U.S. Army soldier has been sentenced to 70 months in federal prison for hacking into telecommunications companies and stealing mobile call and text...

Storm-3168 Threat Actor Exploits Compromised Service Principals for Destructive Azure Attacks

Microsoft Security Research has identified malicious cloud activity associated with JADEPUFFER, a threat actor discovered by Sysdig in July 2026 and reported to be...

Recent Articles

Cyber Warriors Conclave Chapter X — Beyond the Ballroom