Account required
Sign in to view threat intelligence
CTI data is restricted to registered users. Create a free account to browse the dashboard, then upgrade to a paid plan to unlock event details and IOCs.
Cyber Threat Intelligence
Daily snapshot
Daily brief 22 May 2026
Iranian APT Hits Defense as KimWolf DDoS Operator Arrested
Unit 42 maps Iranian APT Screening Serpens; FBI arrests Canadian KimWolf DDoS operator behind 1M+ devices; 60 breach claims include BMW AG and FSB.
Events
0
In current view
Critical exposure
0
Last 24 hours
0
vs previous 24h
Distinct actors
0
In current view
By attack category · 9
Data Exposure
0
Ransomware
0
Access Brokerage
0
DDoS
0
Web Defacement
0
Malware Ops
0
Vulnerability
0
Threat Alert
0
Cyber Operation
0
Top victim countries
No country data in this view.
Subscriber-only
CTI brief — 2026-05-22
The CTI dashboard tracks dark-web disclosures, ransomware claims, data leaks and active threat actors. Full event list, threat-actor profiles and historical archive are available to subscribers.
Events
showing 0
Category
Title
Actor
Country
Date
- DDoSBABAYO EROR SYSTEM targets the website of Komisi Pemilihan UmumBABAYO EROR SYSTEMIndonesia22 May
- Data BreachAlleged data sale of BMJ Paper PackWorldleaksIndonesia22 May
- DDoSBABAYO EROR SYSTEM targets the website of Dinas Pendidikan Provinsi Sulawesi SelatanBABAYO EROR SYSTEMIndonesia22 May
- Data BreachTecnorise GEAR 3.5 Million Braziliansattacker_companyBrazil22 May
- Web DefacementAkudama targets the website of Venom AncillaryAkudamaIndia22 May
- RansomwareSemgrep falls victim to Qilin ransomwareQilinUnited States22 May
- Access BrokerageAlleged unauthorized admin access to Directorate General of Human SettlementsDarkMafiaXIndonesia22 May
- Web DefacementOpsShadowStrike targets the website of Vertex Solutions Pvt LimitedOpsShadowStrikeUnited Kingdom22 May
- DDoSBD Anonymous targets the website of Republic of Korea Special Warfare CommandBD AnonymousSouth Korea22 May
- DDoSN0TI5-S3C targets the website of Police Nursing CollegeN0TI5-S3CThailand22 May
- Web DefacementPhiserXman targets the website of Pengadilan Agama PinrangPhiserXmanIndonesia22 May
- Web DefacementMr.SonicX targets the website of StuviaMr.SonicXIreland22 May
- RansomwareGeneral Directorate of Land Registry and Cadastre falls victim to BASHE RansomwareEraleig (APT73)Turkey22 May
- Web DefacementAkudama targets the website of SMA Strada Bhakti WiyataAkudamaIndonesia22 May
- RansomwareMinsa falls victim to BASHE ransomwareEraleig (APT73)Mexico22 May
- Data BreachAlleged data breach of BMW AGThe BlackH4t MD-GhostGermany22 May
- Data BreachAlleged Data Breach of Tecnorise GEARattacker_companyBrazil22 May
- VulnerabilityAlleged Vulnerability in Trend Micro—Japan22 May
- DDoSRipperSec targets the website of TAV PlusRipperSecIsrael22 May
- VulnerabilityAlleged Critical Vulnerability in Drupal——22 May
- Web DefacementBABAYO EROR SYSTEM targets the website of MOV CorpBABAYO EROR SYSTEMBrunei22 May
- Web DefacementBABAYO EROR SYSTEM targets the website of thecinejr.inBABAYO EROR SYSTEMIndia22 May
- DDoSArmenian code targets the website of İçdaşArmenian codeTurkey22 May
- Data BreachAlleged Data Breach of Universitas Muhammadiyah Metro DatabaseBabayoErorSystemIndonesia22 May
- DDoSArmenian code targets the website of Koral TravelArmenian codeTurkey22 May
- Data BreachAlleged data breach of SMP Negeri 9 PekanbaruSCTHIndonesia22 May
- Access BrokerageAlleged Unauthorized Access to Analisa Berita JakartaRakyat Digital CrewIndonesia22 May
- Access BrokerageAlleged unauthorized access to SHABOpol4rityUkraine22 May
- Data LeakAlleged data leak of UK BusinessThe BlackH4t MD-GhostUnited Kingdom22 May
- RansomwareBuffalo Convention Center falls victim to Akira ransomwareakiraUnited States22 May
- Data BreachAlleged Data Breach of Russian FSB Agent DatabasesmosadRussia22 May
- Web DefacementBABAYO EROR SYSTEM targets the website of prueba.iepelnazarenoayacuchoBABAYO EROR SYSTEM—22 May
- RansomwareFunction Enterprises INC. falls victim to Akira ransomwareakiraUnited States22 May
- Data Breachuruguay: MEC BUTIA [Becas] [10k Sample] [Citizens]LaPampaLeaksUruguay22 May
- Data BreachTanzania police webmailKampucheanTanzania22 May
- Data Breachatol.fr - +800 shops - 5.9M usersAngel_BatistaFrance22 May
- Data BreachOptique by Auchan - 218k usersAngel_BatistaFrance22 May
- Data Breachelearning.natoschool.nato.intListoFadUnited States22 May
- Data Breach3K User Database of Edvt.stc.ac.th | Thailand |DarkMafiaXThailand22 May
- Data BreachFSB Command for Saint PetersburgmosadRussia22 May
- Data BreachI.B. Srl factory in LuzzaraInfrastructure Destruction SquadItaly22 May
- Data Breachdoplim.com.peNemorisHackingPeru22 May
- RansomwareThread Innovations Inc. falls victim to INC Ransom ransomwareINC RANSOMCanada22 May
- DDoSRipperSec targets the website of KavimRipperSecIsrael22 May
- Data BreachAlleged Data Breach of Atol GroupAngel_BatistaFrance22 May
- DDoSInteid targets the website of MinSundhedInteidDenmark22 May
- DDoSNoName targets the website of Sumy City CouncilNoName057(16)Ukraine22 May
- DDoSNoName targets the website of Zaporizhzhia City CouncilNoName057(16)Ukraine22 May
- DDoSNoName targets the website of Dnipropetrovsk Regional State AdministrationNoName057(16)Ukraine22 May
- Data BreachSEGURIDAD Y SERVICIOS SOCIALAES DE AGUASCALIENTESazazeljakelMexico22 May
- DDoSRipperSec targets the website of J StreetRipperSecUnited States22 May
- RansomwareLe Pain Quotidien falls victim to DragonForce ransomwareDragonForceBelgium22 May
- Access BrokerageAlleged unauthorized access to Lake Karrinyup Country ClubZ-PENTEST ALLIANCEAustralia22 May
- Web DefacementTEGAL CYBER TEAM targets the website of StuviaTEGAL CYBER TEAMNetherlands22 May
- Data BreachAlleged sale of Uruguay’s Ministry of Education and Culture (MEC)LaPampaLeaksUruguay22 May
- Data BreachAlleged data breach of Michael's Hair Body & MindThe BlackH4t MD-GhostCanada22 May
- Data BreachAlleged data breach of I.B. SrlInfrastructure Destruction SquadItaly22 May
- RansomwareTvn Media falls victim to BASHE ransomwareEraleig (APT73)Panama22 May
- Data LeakAlleged data leak of Indian GovernmentThe BlackH4t MD-GhostIndia22 May
- Data BreachAlleged Data Breach Suphanburi Technical CollegeDarkMafiaXThailand22 May
- PhishingAlleged Sale of Gmail Phishing ToolkitAkagi—22 May
- Data LeakAlleged Leak of Outlook Email DatabaseBestCombo—22 May
- RansomwareSGS GmbH falls victim to Bavacai RansomwareBavacaiGermany22 May
- Web DefacementPhiserXman targets the website of altraotticastorePhiserXman—22 May
- DDoSDieNet targets the website of Israel Academy of Sciences and HumanitiesDieNetIsrael22 May
- DDoSDieNet targets the website of DelekDieNetIsrael22 May
- DDoSNoName targets the website of KNDS FranceNoName057(16)France22 May
- DDoSNoName targets the website of GroupamaNoName057(16)France22 May
- DDoSNoname targets the website of Atlantic shipyardsNoName057(16)France22 May
- DDoSNoName targets the website of GICATNoName057(16)France22 May
- DDoSNoName targets the website of Renault TrucksNoName057(16)France22 May
- Data BreachAlleged Data Breach Greek Public Decisions Broadcasting SystemAnka TeamGreece22 May
- Data BreachAlleged Data breach of LP Ma'arif NU TrenggalekDigitalStormSecIndonesia22 May
- Data BreachAlleged Data breach of MOVE UP ! FORMATIONAplaGroupFrance22 May
- Access BrokerageAlleged leak of login credentials to Indonesia's Ministry of HealthBABAYO EROR SYSTEMIndonesia22 May
- Data BreachMinistry of Environment and Energy of EcuadorSkull1172Ecuador22 May
- Data BreachSEGURIDAD Y SERVICIOS SOCIALAES DE AGUASCALIENTESazazeljakelMexico22 May
- Data BreachAlleged Data breach of Jimmy FairlyAngel_BatistaUnited Kingdom22 May
- Data BreachAlleged sale of webmail database of Tanzania Police ForceKampucheanTanzania22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of Mitsubishi SamarindaINDRAMAYU CHAOS SYSTEMIndonesia22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of Wira Toyota Banjarbaru.INDRAMAYU CHAOS SYSTEMIndonesia22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of Dealer Mitsubishi BantenINDRAMAYU CHAOS SYSTEMIndonesia22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of Daihatsu CianjurINDRAMAYU CHAOS SYSTEMIndonesia22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of Daihatsu Batam KepriINDRAMAYU CHAOS SYSTEMIndonesia22 May
- Data BreachAlleged data breach of Hillpointe Housing Development DatabasezSeniorUnited States22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of Astra Daihatsu MakassarINDRAMAYU CHAOS SYSTEMIndonesia22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of Agung Toyota BatamINDRAMAYU CHAOS SYSTEMIndonesia22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of Toyota JambiINDRAMAYU CHAOS SYSTEMIndonesia22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of Suzuki MakassarINDRAMAYU CHAOS SYSTEMIndonesia22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of Toyota CimahiINDRAMAYU CHAOS SYSTEMIndonesia22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of Toyota BanjarbaruINDRAMAYU CHAOS SYSTEMIndonesia22 May
- Data BreachGreek System for the Broadcasting of Public DecisionsB0ynerGreece22 May
- Data BreachBanking Service SMTP Server | Brazilsta6Brazil22 May
- Data BreachINDONESIAN LEAGUE ACCOUNTMr. Hanz XploitIndonesia22 May
- Data BreachMinistry of Environment and Energy of EcuadorSkull1172Ecuador22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of Suzuki Mobil MakassarINDRAMAYU CHAOS SYSTEMIndonesia22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of Mitsubishi SoloINDRAMAYU CHAOS SYSTEMIndonesia22 May
- Data LeakAlleged leak of Thailand dataZxS3CThailand22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of Toyota TangerangINDRAMAYU CHAOS SYSTEMIndonesia22 May
- Data BreachAlleged Sale of ISSSPENET Database Containing Mexican Government Employee and Financial DataazazeljakelMexico22 May
- Data BreachAlleged data leak of Ministry of Environment and Energy of the Republic of EcuadorSkull1172Ecuador22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of PT Mahakam Berlian SamjayaINDRAMAYU CHAOS SYSTEMIndonesia22 May
- Data BreachAlleged Sale of Indonesian Super League Account Access DataMr. Hanz XploitIndonesia22 May
- Web DefacementDimasHxR targets the website of upak.co.irDimasHxRIran22 May
- Data BreachAlleged sale of Sorgenia S.p.A. production database and CRM datacyberdluffyItaly22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of Isuzu SurabayaINDRAMAYU CHAOS SYSTEMIndonesia22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of Isuzu DepokINDRAMAYU CHAOS SYSTEMIndonesia22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of Isuzu MyINDRAMAYU CHAOS SYSTEMIndonesia22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of Honda SerpongINDRAMAYU CHAOS SYSTEMIndonesia22 May
- Web DefacementINDRAMAYU CHAOS SYSTEM targets the website of Honda MakassarINDRAMAYU CHAOS SYSTEMIndonesia22 May
- Access BrokerageAlleged sale of unauthorized admin access to unidentified Shopify storecyberdluffy—22 May
- Access BrokerageAlleged unauthorized access to Indonesian League PlatformMr. Hanz XploitIndonesia22 May
- Data BreachAlleged data leak of Adi Jaya TeknikMrsawitIndonesia22 May
- Threat AlertTHE GARUDA EYE claims to target KuwaitTHE GARUDA EYEKuwait22 May
- Data BreachGreek System for the Broadcasting of Public DecisionsB0ynerGreece22 May
- Data BreachBanking Service SMTP Server | Brazilsta6Brazil22 May
- Data BreachINDONESIAN LEAGUE ACCOUNTMr. Hanz XploitIndonesia22 May
- Data LeakAlleged sale of SMTP server access linked to a Brazilian banking servicesta6Brazil22 May
- Data BreachAlleged data leak of Universitas Islam Sumatera UtaraXyph0rixIndonesia22 May
- Data BreachAlleged data leak of North Bengkulu Population and Civil Registration AgencyXyph0rixIndonesia22 May
- Data Breachjimmyfairly.com - French optician since 2010 - 357k usersAngel_BatistaFrance22 May
- Data Breachloungeboard.netLucas1218Dark Web22 May
- Data LeakAlleged leak of Israel data0rsted_Israel22 May
- Data BreachAlleged data sale of AtoatabaskossFrance22 May
- Data BreachAlleged Data Breach of AlmerysLaguiFrance22 May
- Web DefacementTEAM UCC targets the website of Cockroach Janata PartyTEAM UCCIndia22 May
- DDoSKeymous Plus targets the website of Disney PlusKeymous PlusUnited States22 May
- Web DefacementPhiserXman targets the website of Aplikasi Aktivitas Kerja ASN Pemerintah Provinsi PapuaPhiserXmanIndonesia22 May
- Web DefacementBABAYO EROR SYSTEM targets the website of drapb.gov.bdrBABAYO EROR SYSTEM—22 May
- Web DefacementBABAYO EROR SYSTEM targets the website of AppuninoBABAYO EROR SYSTEM—22 May
- Web DefacementBABAYO EROR SYSTEM targets the website of Mizanur Rahman AzhariBABAYO EROR SYSTEM—22 May
- RansomwareRoto Immobilien GmbH falls victim to Qilin ransomwareQilinAustria22 May
- Web Defacement0xSHALL targets the website of Hamirpesset0xSHALLIsrael22 May
- Web DefacementBABAYO EROR SYSTEM targets the website of ultrahotebd.shopBABAYO EROR SYSTEM—22 May
- Web DefacementElite Squad targets the website of Carno colombiaElite SquadColombia22 May
- Web DefacementBABAYO EROR SYSTEM targets the website of webculturelab.comBABAYO EROR SYSTEM—22 May
- Data BreachAlleged data sale of Israel Property HubExchange MarketsIsrael22 May
- Data BreachAlleged data sale of BuyitinisraelExchange MarketsIsrael22 May
- Data BreachAlleged data sale of Realestate IsraelExchange MarketsIsrael22 May
- Data BreachAlleged Data Breach of CyberSecurity ClubLazarusUzbekistan22 May
- Web DefacementZod targets the website of Paengza InvestmentZodThailand22 May
- Data BreachAlleged Data Breach of CECyTE GuanajuatoChronus leaksMexico22 May
- Web DefacementZod targets the website of Mahasila Viravongs FoundationZodThailand22 May
- Data BreachAlleged Data Breach of AvitofexusMorocco22 May
- Data BreachAlleged data breach of Tashkent International University of EducationLazarusUzbekistan22 May
- Data BreachAlleged data breach of New Uzbekistan UniversityLazarusUzbekistan22 May
- Data BreachAlleged data breach of Inha University in TashkentLazarusUzbekistan22 May
- Data LeakAlleged data leak of Rumah KomunitasSCTHIndonesia22 May
- Malware OpsAlleged Sale of Telegram Bot Scraping and Parsing ServiceCARDOMAT—22 May
- Web DefacementZod targets the website of Hanoi BuffaloesZodVietnam22 May
- RansomwareVernon & Ginsburg, LLP falls victim to Qilin ransomwareQilinUnited States22 May
- RansomwareSnyder Packaging, Inc. falls victim to Qilin ransomwareQilinUnited States22 May
- DDoSWolves of Turan targets the website of MINISTRY OF ENVIRONMENT OF THE REPUBLIC OF ARMENIAWolves of TuranArmenia22 May
- DDoSWolves of Turan targets the website of Ministry of Education, Science, Culture and Sports of the Republic of ArmeniaWolves of TuranArmenia22 May
- DDoSWolves of Turan targets the website of Chamber of Accounts of the Republic of ArmeniaWolves of TuranArmenia22 May
- Access BrokerageAlleged sale of unauthorized access to drip irrigation system in ArmeniaWolves of TuranArmenia22 May
- Web Defacement/Outsiders targets the website of Universitas Cendrawasih./OutsidersIndonesia22 May
- Threat AlertNullsec Nigeria claims to target South African Police ServiceNullsec NigeriaSouth Africa22 May
- Data BreachAlleged data breach of CryptofalkaXyph0rixHungary22 May
- Web DefacementUshiromiya targets the website of Madrasah IbtidaiyahUshiromiyaIndonesia22 May
- Web Defacement/Rayzky_ targets the website of Filterie Company/Rayzky_Saudi Arabia22 May
- RansomwareMy New School Mexico falls victim to Nova ransomwareNovaMexico22 May
- Data BreachAlleged data leak of vitaaamin.shoppol4rity—22 May
- RansomwareGrupo Perforaciones HD falls victim to Nova RansomwareNovaMexico22 May
- Web DefacementUshiromiya targets the website of Yayasan Banu HasyimUshiromiyaIndonesia22 May
- Data BreachAlleged data breach of BigMagpol4rityUkraine22 May
- RansomwareVATT Academy falls victim to Nova RansomwareNovaMexico22 May
- RansomwareArkin falls victim to Nova RansomwareNovaMexico22 May
- VulnerabilityAlleged critical vulnerability in The High Authority for Transparency, Prevention and Fight Against CorruptionInvestigation AnonymousAlgeria22 May
- RansomwareENI 360 falls victim to Nova RansomwareNovaMexico22 May
- Web Defacement./Outsiders targets the website of Liceo del Valle./OutsidersMexico22 May
- RansomwareEl Lugarcito falls victim to Nova RansomwareNovaMexico22 May
- VulnerabilityAlleged critical vulnerability in Caisse Nationale des RetraitesInvestigation AnonymousAlgeria22 May
- DDoSArmenian code targets the website of Corendon Hotels & ResortsArmenian codeNetherlands22 May
- DDoSArmenian code targets the website of BEST TURKEY TOURArmenian codeTurkey22 May
- DDoSArmenian code targets the website of GurTour TravelArmenian codeTurkey22 May
- RansomwareNational Astronomical Research Institute of Thailand (NARIT) falls victim to BASHE ransomwareEraleig (APT73)Thailand22 May
- VulnerabilityAlleged critical vulnerability in CNAS AlgeriaInvestigation AnonymousAlgeria22 May
- RansomwareAlkaloid AD Skopje falls victim to BASHE ransomwareEraleig (APT73)North Macedonia22 May
- Web DefacementDimasHxR targets the website of SyncMasterDimasHxRSpain22 May
- RansomwareGrupo Petersen falls victim to BASHE RansomwareEraleig (APT73)Argentina22 May
- Web DefacementElite Squad targets the website of Hamsters MedellinElite SquadColombia22 May
No events match your filters.
Page 1 of 1
Active threat actors
click any actor to filter the list aboveNo active actors in this view.