Is your PHP version at risk of PHP2Shell RCE? Check Free Now
SOCRadar Blog

Threat intelligence, decoded.

In-depth research, dark web reporting, and practical guidance for security teams, written by SOCRadar threat analysts.

Latest articles

New Gootloader Variant “GootBot” Changes the Game in Malware Tactics SOCRadar

New Gootloader Variant “GootBot” Changes the Game in Malware Tactics

Researchers recently identified a fresh Gootloader malware variant known as “GootBot,” used in SEO poisoning attacks. This variant introduces features that enable threat actors to move laterally within infected systems,…

Japanese IT Breach, CPanel Auctions, LinkedIn Data Leak SOCRadar

Japanese IT Breach, CPanel Auctions, LinkedIn Data Leak

The SOCRadar Dark Web Team has meticulously documented a series of disturbing transactions within the obscured recesses of the dark web. These include the alarming sale of unauthorized shell access…

Dark Peep #4: Ransomware For Sale SOCRadar

Dark Peep #4: Ransomware For Sale

October finally ended; we hope the cybersecurity awareness month was helpful for everyone. In this issue of Dark Peep, we will discuss the interesting events that caught the attention of…

The Five Families: Hacker Collaboration Redefining the Game SOCRadar

The Five Families: Hacker Collaboration Redefining the Game

At the end of the Summer of 2023, five hacker groups, including ThreatSec, GhostSec, Stormous, Blackforums, and SiegedSec, have collectively formed an entity known as “The Five Families.” The name…

Critical RCE Vulnerability in Apache ActiveMQ Is Targeted by HelloKitty Ransomware (CVE-2023-46604) SOCRadar

Critical RCE Vulnerability in Apache ActiveMQ Is Targeted by HelloKitty Ransomware (CVE-2023-46604)

[Update] November 4, 2025: Kinsing Uses Apache ActiveMQ Flaw (CVE-2023-46604) to Deliver Sharpire Backdoor [Update] December 19, 2023: “Ongoing Exploitation of Apache ActiveMQ Vulnerability: Threat Actors Leverage Ladon, NetCat, AnyDesk,…

Counter-Ransomware Initiative: A United Front Against Ransomware SOCRadar

Counter-Ransomware Initiative: A United Front Against Ransomware

[Update] November 9, 2023: Boeing was once again leaked on the victim site of the LockBit*** [Update] November 3, 2023: LockBit lists Boeing again, leaks data, and once again removes…

Atlassian CISO Announced: Improper Authorization Vulnerability Detected on Confluence Data Center and Server (CVE-2023-22518) SOCRadar

Atlassian CISO Announced: Improper Authorization Vulnerability Detected on Confluence Data Center and Server (CVE-2023-22518)

[Update] April 18, 2023: “Cerber Ransomware Exploits CVE-2023-22518 in Confluence Servers, Deploys Linux Variant” [Update] November 8, 2023: CISA has included the CVE-2023-22158 vulnerability in Confluence Data Center and Server…

Dark Opinion: Doing Things Under the Rose, Proxy Data Recovery Companies for Ransomware Negotiation SOCRadar

Dark Opinion: Doing Things Under the Rose, Proxy Data Recovery Companies for Ransomware Negotiation

During the pandemic, a lot of untrue stories spread around. This happened a lot after people started questioning the COVID-19 vaccine. One common belief was that “the vaccine producers are…

Never miss a critical advisory.

Join 30,000+ security professionals who read SOCRadar research every week.

See SOCRadar in Action