Account required
Sign in to view threat intelligence
CTI data is restricted to registered users. Create a free account to browse the dashboard, then upgrade to a paid plan to unlock event details and IOCs.
Cyber Threat Intelligence
Daily snapshot
Daily brief 22 July 2026
OT Alerts and Breach Claims Hit Public Infrastructure
Iran-linked OT alerts broaden as 83 alleged exposures span government, education and finance; Kimsuky and critical endpoint flaws raise risk.
Events
0
In current view
Critical exposure
0
Last 24 hours
0
vs previous 24h
Distinct actors
0
In current view
By attack category · 9
Data Exposure
0
Ransomware
0
Access Brokerage
0
DDoS
0
Web Defacement
0
Malware Ops
0
Vulnerability
0
Threat Alert
0
Cyber Operation
0
Top victim countries
No country data in this view.
Subscriber-only
CTI brief — 2026-07-22
The CTI dashboard tracks dark-web disclosures, ransomware claims, data leaks and active threat actors. Full event list, threat-actor profiles and historical archive are available to subscribers.
Events
showing 0
Category
Title
Actor
Country
Date
- RansomwareAptara falls victim to Everest ransomwareEverestUnited States22 Jul
- Web DefacementQX-CYBER targets the website of Makok Nuea Subdistrict MunicipalityQX-CYBERThailand22 Jul
- Data BreachAlleged data breach of CODE JaliscoCortex-groupMexico22 Jul
- Web DefacementX-VDP-X targets the website of France Cyber DefenseX-VDP-XFrance22 Jul
- RansomwareEFU Life Assurance Ltd. falls victim to Qilin ransomwareQilinPakistan22 Jul
- Data BreachAlleged data breach of University of Haifaimostafaa6Israel22 Jul
- RansomwareCPCG falls victim to Qilin ransomwareQilinUnited States22 Jul
- Access BrokerageAlleged sale of unauthorized access to tutoronline.muhriz.comshellshell—22 Jul
- Access BrokerageAlleged sale of unauthorized access to True VisashellshellIndia22 Jul
- Malware OpsAlleged Sale of Botnet Install Servicekrizzle—22 Jul
- RansomwareVibonum Technologies Private Limited falls victim to KRYBIT ransomwareKRYBITIndia22 Jul
- DDoSthai is god targets the website of PRESS OCMthai is godCambodia22 Jul
- Access BrokerageAlleged sale of unauthorized access to Anka's Cake AcademyshellshellIndia22 Jul
- Data LeakAlleged data leak of UK Forex TradersLauraAllenUnited Kingdom22 Jul
- Access BrokerageAlleged sale of unauthorized access to Neoolife Global RecruitersshellshellIndia22 Jul
- Access BrokerageAlleged unauthorized access to U.S. WordPress ShopClassWarUnited States22 Jul
- Access BrokerageAlleged sale of unauthorized access to starvisaconsultants.co.inshellshellIndia22 Jul
- Access BrokerageAlleged sale of unauthorized access to American GrillshellshellIndia22 Jul
- Access BrokerageAlleged sale of webshell access to dolta.inshellshellIndia22 Jul
- RansomwareDelhi Heart and Lung Institute Falls Victim to Krybit RansomwareKRYBITIndia22 Jul
- DDoSBD Anonymous targets the website of Criminal Investigation Department West Bengal PoliceBD AnonymousIndia22 Jul
- Malware OpsAlleged Sale of Source Code for a Fully Undetectable Windows Data Collection FrameworkShadowCoder—22 Jul
- Data LeakAlleged sale of government emails from USA and UKfraudnetUnited States, United Kingdom22 Jul
- RansomwareUniversity Sprinkler Systems Falls Victim to Akira RansomwareakiraCanada22 Jul
- RansomwareKruse Construction Falls Victim to Akira RansomwareakiraUnited States22 Jul
- VulnerabilityAlleged sale of 0-day vulnerabilityMikeclover—22 Jul
- Data LeakAlleged Data leak of QuBisametadataIndonesia22 Jul
- Web Defacement6ickzone target the website of XIIX Art Academy6ickzoneIran22 Jul
- Data BreachAlleged Data Breach of Quality Woven Labels (QWL)nest0rUnited States22 Jul
- DDoSNoName057(16) claims to targets the website of GEODISNoName057(16)France22 Jul
- Data BreachAlleged Data Breach of Wellbee'snest0rUnited States22 Jul
- Data BreachAlleged data breach of Immobilière TariotJundAlNabi OfficialFrance22 Jul
- Web DefacementY1n targets the website of Municipal Chamber of CaracolY1nBrazil22 Jul
- Web Defacementlxrdk1773n targets the website of Várzea Grandelxrdk1773nBrazil22 Jul
- DDoSBD Anonymous targets the website of Israel Laboratory Accreditation AuthorityBD AnonymousIsrael22 Jul
- RansomwarePelli Clarke & Partners Falls Victim to Booba Team RansomwareBooba TeamUnited States22 Jul
- Access BrokerageAlleged unauthorized access to an unidentified irrigation system in FranceNoName057(16)France22 Jul
- Data BreachAlleged data breach of Wang Nam Yen HospitalQX-CYBERThailand22 Jul
- Access BrokerageAlleged unauthorized access to YellowPages ThailandEKIA_DOMThailand22 Jul
- Web Defacementlxrdk1773n targets the website of Municipality of Várzea Grandelxrdk1773nBrazil22 Jul
- Data BreachAlleged Data Breach of RevolutionPartskittaUnited States22 Jul
- Web DefacementMarleng1337 targets the website of Instituto Nacional de Saude Publica (INSP)Marleng1337Cabo Verde22 Jul
- Data BreachAlleged data breach of BebunkkittaFrance22 Jul
- Web DefacementGhostShell targets the website of Amirkabir Recreational & Tourism ComplexGhostShellIran22 Jul
- Access BrokerageAlleged leak of login access to PT Pertamina RetailMark FailedIndonesia22 Jul
- Data BreachAlleged data breach of Instituto Nacional ElectoralArcepahs channelMexico22 Jul
- Data BreachAlleged data breach of MagMutualLeaknetUnited States22 Jul
- Web DefacementInside Alone7 targets the website of REMISIInside alone7Indonesia22 Jul
- Web DefacementVinzXploit targets the website of Tidore Islands City Regional GovernmentVinzXploitIndonesia22 Jul
- Web Defacementchinafans targets the website of National Directorate of EmploymentchinafansNigeria22 Jul
- Data BreachAlleged Data Breach of PagBank Payment Gateway DatabaseinfinityteamBrazil22 Jul
- Data BreachAlleged Data Breach of PagBankinfinityteamBrazil22 Jul
- Web DefacementJust Z targets the website of Mechanical and Aerospace Engineering DepartmentJust ZThailand22 Jul
- Data LeakAlleged Sale of Verified Crypto Wallet & Exchange AccountsKormottt—22 Jul
- Web DefacementJust Z targets the website of Prachachuen Metropolitan Police StationJust ZThailand22 Jul
- Data BreachAlleged data breach of University of HaifaS-RootIsrael22 Jul
- RansomwareKoshkaryan Law Group Falls Victim to DragonForce RansomwareDragonForceUnited States22 Jul
- Access BrokerageAlleged sale of web shell access to Akuvox in KazakhstanHeartBrokenKazakhstan22 Jul
- Access BrokerageAlleged sale of Web shell access to Kamrul HossainMarket XBangladesh22 Jul
- Access BrokerageAlleged sale of Web shell access to Madrasatul IlmMarket XBangladesh22 Jul
- Access BrokerageAlleged sale of Web shell access to Aggregate carserviceMarket XUkraine22 Jul
- Web DefacementJust Z targets the website of Taopoon Metropolitan Police StationJust ZThailand22 Jul
- RansomwareInfoSync Falls Victim to Chaos RansomwareCHAOSUnited States22 Jul
- DDoSNoName targets the website of Départemental de l'AudeNoName057(16)France22 Jul
- DDoSNoName targets the website of Département de l'EureNoName057(16)France22 Jul
- DDoSNoName targets the website of Département des Hautes-PyrénéesNoName057(16)France22 Jul
- DDoSNoName targets the website of Délégation à la Sécurité RoutièreNoName057(16)France22 Jul
- DDoSNoName targets the website of Department of LandesNoName057(16)France22 Jul
- DDoSNoName targets the website of Préfecture du GersNoName057(16)France22 Jul
- DDoSNoName targets the website of Préfecture de la VienneNoName057(16)France22 Jul
- Web Defacementazraelzer0d4y target the website of Auditoría Superior del Estado de Tamaulipasazraelzer0d4yMexico22 Jul
- DDoSNoName targets the website of Préfecture de la Haute-SaôneNoName057(16)France22 Jul
- Web Defacementbl33dr00t targets the website of Secretaria de Estado da Mulher (SEMULHER), Government of Acrebl33dr00tBrazil22 Jul
- DDoSMedusa Network targets the website of TokopediaMedusa NetworkIndonesia22 Jul
- Web Defacementazraelzer0d4y targets the website of Central Agricultural Research Instituteazraelzer0d4yLiberia22 Jul
- Access BrokerageAlleged sale of unauthorised Admin panel access to Yamaha Motor ArgentinaEXILIADOS #555Argentina22 Jul
- Web Defacementazraelzer0d4y target the website of Provincial Government Officeazraelzer0d4yThailand22 Jul
- Data BreachAlleged data sale of SapalArcepahs channelMexico22 Jul
- Access BrokerageAlleged sale of shell access to kepk.fk.ui.ac.idMARKET DOMAINIndonesia22 Jul
- DDoSBD Anonymous targets the website of Ourense Provincial CouncilBD AnonymousSpain22 Jul
- Threat AlertHackero$ claims to target Government of the State of MichoacánHackero$Mexico22 Jul
- Data BreachAlleged sale of Ticketmaster/AXS ticket databaseBUSINESSM4NUnited States22 Jul
- Access BrokerageAlleged sale of shell access to Tentara Nasional IndonesiaMARKET DOMAINIndonesia22 Jul
- Access BrokerageAlleged sale of shell access to Yên Bái Provincial People's CommitteeMARKET DOMAINVietnam22 Jul
- Access BrokerageAlleged sale of shell access to Southeast Maluku Regency GovernmentMARKET DOMAINIndonesia22 Jul
- Access BrokerageAlleged sale of shell access to Mater Dei SchoolMARKET DOMAINThailand22 Jul
- Access BrokerageAlleged sale of Shell access to Government of Pasuruan CityMARKET DOMAINIndonesia22 Jul
- Access BrokerageAlleged sale of Shell access to Universitas Sulawesi BaratMARKET DOMAINIndonesia22 Jul
- Access BrokerageAlleged sale of shell access to Harrisburg University of Science and TechnologyMARKET DOMAINUnited States22 Jul
- Data LeakAlleged data leak of mctiers.comseraphims—22 Jul
- Web DefacementVinzXploit targets the website of Department of Labour and EmploymentVinzXploitSyria22 Jul
- Access BrokerageAlleged sale of WebShell access to Stanford UniversityMARKET DOMAINUnited States22 Jul
- Data LeakAlleged leak of Peruvian municipal authorities' contact databasesc4r_0x00Peru22 Jul
- Data LeakAlleged sale of credit card number and expiration date recordskalesunfox—22 Jul
- Data BreachAlleged breach of Bank of MontrealKARAWANG ERROR SYSTEMCanada22 Jul
- Access BrokerageAlleged unauthorized WebShell access to Brazil government websitesWorld Of ShellsBrazil22 Jul
- Access BrokerageAlleged unauthorized WebShell access to Mexico government websitesWorld Of ShellsMexico22 Jul
- Data BreachAlleged Data Breach of Municipal Government of Ciudad JuárezEXILIADOS #555Mexico22 Jul
- Access BrokerageAlleged unauthorized WebShell access to Peru government websitesWorld Of ShellsPeru22 Jul
- Data LeakAlleged data leak of Municipal Government of Ciudad JuárezV01Mexico22 Jul
- Access BrokerageAlleged sale of unauthorized access to African Pits & Quarries LimitedshellshellNigeria22 Jul
- Access BrokerageAlleged sale of unauthorized access to Editha's SamosashellshellUnited Kingdom22 Jul
- Access BrokerageAlleged sale of unauthorized access to i-genieshellshellUnited Kingdom22 Jul
- Access BrokerageAlleged sale of unauthorized access to National Identity Number Registration PortalshellshellUnited Kingdom22 Jul
- Access BrokerageAlleged unauthorized WebShell access to Argentine government websitesWorld Of ShellsArgentina22 Jul
- Data BreachAlleged data breach of Central Electoral Board of the Dominican Republicsc4r_0x00Dominican Republic22 Jul
- Access BrokerageAlleged sale of unauthorized access to Sub4Fin LtdshellshellUnited Kingdom22 Jul
- Access BrokerageAlleged sale of unauthorized access to Recovery AlainshellshellUnited Kingdom22 Jul
- Access BrokerageAlleged sale of WebShell Access to Healing Touch Worldwide FoundationMarket XUnited States22 Jul
- Access BrokerageAlleged sale of unauthorized access to 247 Vehicle Breakdown RecoveryshellshellUnited Kingdom22 Jul
- Access BrokerageAlleged sale of unauthorized access to Car Recoverys UKshellshellUnited Kingdom22 Jul
- DDoSTheGarudaEye targets the website of Ministry of Planning,Development & Special InitiativesTheGarudaEyePakistan22 Jul
- Data BreachAlleged data breach of Secretaria de Estado da Mulherbl33dr00tBrazil22 Jul
- Web DefacementCoupDeGrace targets the website of Simpletax GmbHCoupDeGraceIran22 Jul
- Data BreachAlleged data breach of Instituto Nacional de Servicios Sociales para Jubilados y PensionadosvLeakzArgentina22 Jul
- Web Defacementazraelzer0d4y targets the website of Central Agricultural Research Instituteazraelzer0d4yLiberia22 Jul
- Malware OpsAlleged sale of RustRatSandFoxy—22 Jul
- Malware OpsAlleged rental of Resident Loader malwareplayer1843—22 Jul
- Data BreachAlleged Data Breach of Venezuelan Football FederationBlackHex BrotherhoodVenezuela22 Jul
- Data BreachASIPONA MAZATLAN, SINALOAHackero$Mexico22 Jul
- Data BreachPrefeitura Municipal de Volta RedondaBL33DR00TBrazil22 Jul
- Data BreachCLASSWALLA BY THE ONGRYEOK GROUPOngryeokIndia22 Jul
- Data BreachINE OAXACAArcepahMexico22 Jul
- Data BreachPEMUDA PANCASILA INDONESIAN ORGmetadataIndonesia22 Jul
- Access BrokerageAlleged sale of unauthorized WordPress admin access to an unidentified shop in the UKUnitTUnited Kingdom22 Jul
- Data BreachAlleged data breach of NASADR4K7H CYBER TEAM ( D C T )United States22 Jul
- Data Breachpa.gov.br404Crew Cyber TeamBrazil22 Jul
- Data BreachMilitary UAV Operational Capabilities DocumentmosadIndia22 Jul
- Data BreachSaudi General Intelligence Presidency (GIP)0cx00iqSaudi Arabia22 Jul
- Data BreachEMAR ASIPONA MAZATLAN, SINALOAcenfecrackedMexico22 Jul
- Data Breachinterlab.mxDBHunterMexico22 Jul
- Data Breachutepsa.eduSALDIRGANBolivia22 Jul
- Data BreachAlleged data leak of Cacique Doble Poder Legislativo404 CREW CYBER TEAMBrazil22 Jul
- Data BreachAlleged data leak of Prefeitura Municipal de Belterra404 CREW CYBER TEAMBrazil22 Jul
- DDoSBlackHex Brotherhood targets the website of Presidency of the Bolivarian Republic of VenezuelaBlackHex BrotherhoodVenezuela22 Jul
- Data BreachAlleged data breach of Administración del Sistema Portuario Nacional Mazatlán, S.A. de C.V.Hackero$Mexico22 Jul
- Data BreachAlleged data breach of Saudi General Intelligence Presidency (GIP)0cx00iqSaudi Arabia22 Jul
- Access BrokerageAlleged unauthorized access to an unidentified system0cx00iq—22 Jul
- Data BreachAlleged leak of Ministry of DefenceData HoarderIndia22 Jul
- Data LeakAlleged leak of Indian Smart Anti-Airfield Weapon design and technical documentationmosadIndia22 Jul
- RansomwareCanal 9 Litoral falls victim to Nova RansomwareNovaArgentina22 Jul
- Web DefacementZephyris targets the website of Vladimir Dahl Lugansk State UniversityZephyrisRussia22 Jul
- Data BreachAlleged data breach of Universidad Tecnológica Privada de Santa Cruz(UTEPSA)‘OFFENSIVEBolivia22 Jul
- RansomwareMarpatech falls victim to Nova RansomwareNovaPeru22 Jul
- Web DefacementZephyris targets the website of Department of Geography, CroatiaZephyrisCroatia22 Jul
- Access BrokerageAlleged Leak of Unauthorized Access to an Unidentified Aviation Management PlatformS4uD1Pwnz—22 Jul
- Data LeakAlleged leak of Indian military UAV operational capabilities documentmosadIndia22 Jul
- Web Defacementazraelzer0d4y targets the website of Tribunal de Contas do Estado de Goiásazraelzer0d4yBrazil22 Jul
- Data BreachAlleged data breach of Prefeitura Municipal de Volta Redondabl33dr00tBrazil22 Jul
- Malware OpsAlleged Sale of HiddenDesktop Malwarezhuk—22 Jul
- Access BrokerageAlleged Sale of WP Admin and SFTP Access in USAraimondoUnited States22 Jul
- Data LeakAlleged data leak of Perul1ghtSoulHemPeru22 Jul
- Data LeakAlleged Sale of Ticketmaster AccountsTelephoneUnited States22 Jul
- Data BreachAlleged data breach of RapidFortxpl0itrsUnited States22 Jul
- Data BreachAlleged data breach of Mazatlán Municipal GovernmentHackero$Mexico22 Jul
- DDoS12sec targets the website of National Aeronautics and Space Administration (NASA)12secUnited States22 Jul
- Data BreachAlleged data breach of Fleurs de DragéesDataDaddy666France22 Jul
- Data BreachAlleged data breach of ERIS Fire Protection4me1France22 Jul
- Data BreachAlleged data breach of ClassWallaOngryeokIndia22 Jul
- Access BrokerageAlleged leak of webshell access to killianinsure.comLearn Exploit—22 Jul
- Data BreachAlleged data breach of eTeamdndimaghostUnited States22 Jul
- Web DefacementDC Imam Dogan targets the website of The Stanford Translational AI (STAI) LabDC Imam DoganUnited States22 Jul
- Data BreachAlleged data breach of CoinbaseHiddenHqUnited States22 Jul
- Access BrokerageAlleged Unauthorized Full access to Iranian dam control systemAnonymousIran22 Jul
- Access BrokerageAlleged Unauthorized Access to unidentified Pakistani network infrastructureBlackDragonSecPakistan22 Jul
- Access BrokerageAlleged leak of web shell access to hidrapeleretinol.com.brLearn ExploitBrazil22 Jul
- Data LeakCarla Exposes Customer Rental Data—Turkey22 Jul
- Access BrokerageAlleged leak of webshell access to sip-school.ruLearn ExploitRussia22 Jul
- RansomwareTax-MT PLLC falls victim to PLAY ransomwarePLAYUnited States22 Jul
- Web Defacementchinafans targets the website of Auditoría Superior del Estado de TamaulipaschinafansMexico22 Jul
- Access BrokerageAlleged sale of WebShell Access to 5d-dev.comHMEI7—22 Jul
- Access BrokerageAlleged sale of WebShell Access to Prazdnik-MixHMEI7Russia22 Jul
- RansomwareKreysler and Associates falls victim to PLAY ransomwarePLAYUnited States22 Jul
- Access BrokerageAlleged sale of unauthorized access to boutiquemargaritawpdealerSpain22 Jul
- Web DefacementCyber Islamic Resistance targets the website of Ayelet Hashachar ApiaryCyber Islamic ResistanceIsrael22 Jul
- Access BrokerageAlleged sale of unauthorized access to Editorial MagauxwpdealerSpain22 Jul
- RansomwareArgonaut Manufacturing Services Inc. falls victim to Chaos RansomwareCHAOSUnited States22 Jul
- Access BrokerageAlleged sale of unauthorized access to juridibalmes.eswpdealerSpain22 Jul
- Web DefacementNT404 targets the website of Archotec ArchitectureNT404Iran22 Jul
- Web DefacementNT404 targets the website of Shahre Man OnlineNT404Iran22 Jul
- Access BrokerageAlleged sale of unauthorized access to mamaafrika.eswpdealerSpain22 Jul
- Web DefacementCoupDeGrace targets the website of ADAK MEMARCoupDeGraceIran22 Jul
- Data BreachAlleged data breach of Satuan Pelayanan Pemenuhan Gizi (SPPG)SadClownIndonesia22 Jul
- Web DefacementCoupDeGrace targets the website of HamtimiCoupDeGraceIran22 Jul
- DDoSBlackHex Brotherhood targets the website of National Institute of Land Transport (INTT)BlackHex BrotherhoodVenezuela22 Jul
- Web DefacementCoupDeGrace targets the website of Narcissus SupermarketCoupDeGraceIran22 Jul
- Access BrokerageAlleged sale of unauthorized access to Thanato GroupwpdealerSpain22 Jul
- Access BrokerageAlleged sale of unauthorized access to Fernan DíezwpdealerSpain22 Jul
- Access BrokerageAlleged sale of unauthorized access to Marble ShopwpdealerSpain22 Jul
- Access BrokerageAlleged sale of unauthorized access to trendystories.eswpdealerSpain22 Jul
- RansomwareSIRL falls victim to The Gentlemen ransomwareThe GentlemenPortugal22 Jul
- Access BrokerageAlleged sale of unauthorized access to Pan de AlmuñécarwpdealerSpain22 Jul
- Access BrokerageAlleged sale of unauthorized access to Solutec ServiceswpdealerSpain22 Jul
- Access BrokerageAlleged sale of unauthorized access to Mecanica VitalwpdealerSpain22 Jul
- Access BrokerageAlleged sale of unauthorized access to Casino de AstorgawpdealerSpain22 Jul
- Access BrokerageAlleged sale of unauthorized access to drpool.eswpdealerSpain22 Jul
- Access BrokerageAlleged sale of unauthorized access to Quiromasajista en TorrentwpdealerSpain22 Jul
- Access BrokerageAlleged sale of unauthorized access to dranamarbella.eswpdealerSpain22 Jul
- Access BrokerageAlleged sale of unauthorized access to Llar Residencial IntegraliawpdealerSpain22 Jul
- RansomwareEvergreen Title Company, Inc. falls victim to Qilin ransomwareQilinUnited States22 Jul
- Access BrokerageAlleged sale of unauthorized access to FamatwpdealerSpain22 Jul
- Data LeakAlleged Sale of Twitter Premium Accountsxtwee—22 Jul
- Web DefacementJundAlNabi Official targets the website of Messe Frankfurt GmbHJundAlNabi OfficialGermany22 Jul
- Data LeakAlleged Sale of Customer Data from an Unidentified Organizationerror—22 Jul
- Access BrokerageAlleged sale of unauthorized access to joseluistaxistaleon.eswpdealerSpain22 Jul
- Web DefacementLaggerghost Priv8 targets the websites of IQ UFRJLaggerghost Priv8Brazil22 Jul
- Access BrokerageAlleged sale of WebShell Access to SamraengHMEI7Thailand22 Jul
- Access BrokerageAlleged Sale of Unauthorized RDWeb Access to an Unidentified Organization in USAdoZKeyUnited States22 Jul
- DDoS313 Team targets the website of OVHcloud313 TeamFrance22 Jul
- Access BrokerageAlleged sale of Access to Government & Educational websites0xTeam-Network—22 Jul
- Data BreachAlleged Data breach of SMART-TECZYR4X NXTunisia22 Jul
No events match your filters.
Page 1 of 1
Active threat actors
click any actor to filter the list aboveNo active actors in this view.