Happy Ransomware: A Silent MedusaLocker Variant Actively Crippling Enterprise Networks Cyber Threat Intelligence AegironJanuary 22, 2026January 22, 20269 mins0 Happy Ransomware (MedusaLocker family – Enterprise-targeted ransomware)Discovery timeframe: January 2026Target profile: Medium to large enterprise networksImpact type:…continue reading..
Osiris Ransomware: How a Trusted Driver Was Turned Into a Weapon to Kill Security and Encrypt Enterprises Cyber Threat Intelligence AegironJanuary 22, 202610 mins0 Osiris Ransomware – BYOVD-Based Attack Using POORTRY Driver Initial Discovery: January 22Attack Type: Ransomware with Security Bypass…continue reading..
NexShield ‘CrashFix’: How a Fake Browser Repair Crashes Chrome and Installs a Remote Access Trojan Cyber Threat Intelligence AegironJanuary 21, 2026January 21, 202610 mins0 Executive Summary A malicious browser extension operating under the name NexShield – CrashFix was identified actively targeting…continue reading..
Trusted Updates Turned Weaponized: Snap Store Publisher Hijacking Leads to Silent Crypto Theft on Linux Cyber Threat Intelligence AegironJanuary 21, 2026January 21, 20269 mins0 Executive Summary This incident describes a supply-chain attack targeting Linux users through the Snap application ecosystem operated…continue reading..
PDFSider: Anatomy of a Fake Update Malware Campaign Delivering Remote Control to Attackers Cyber Threat Intelligence AegironJanuary 20, 2026January 20, 20269 mins0 PDFSider Malware Incident Overview Date Identified: January 20, 2026Threat Level: High (APT-grade, targeted) Executive Summary In mid-January…continue reading..
A Single Click on LinkedIn: Inside a Silent RAT Infection Cyber Threat Intelligence AegironJanuary 20, 2026January 20, 20269 mins0 Overview of the Incident In January 2026, a targeted malware campaign was identified leveraging LinkedIn private messaging…continue reading..
SolyxImmortal: The Silent Stealer Hijacking Credentials, Sessions, and Screens in Plain Sight Cyber Threat Intelligence AegironJanuary 19, 2026January 19, 202611 mins0 SolyxImmortal Stealer Disclosure timeframe: January 2026Malware type: Information-stealing malware (credential and session hijacking) Executive Summary SolyxImmortal is…continue reading..
Silent Access, Stolen Trust: UAT-8837 Credential-Focused Intrusions Target North American Critical Infrastructure Cyber Threat Intelligence AegironJanuary 16, 2026January 16, 202614 mins0 Reported: January 16, 2026Threat Actor: UAT-8837Campaign Type: Cyber-espionage / Pre-positioningPrimary Objective: Credential harvesting and long-term accessTarget Region:…continue reading..
LOTUSLITE: A Stealth Espionage Operation Hiding Behind Trusted Windows Binaries Cyber Threat Intelligence AegironJanuary 16, 2026January 16, 202613 mins0 Executive overview In January 2026, a covert and highly targeted cyber-espionage campaign was uncovered targeting U.S. government…continue reading..
One Click Away: Phishing Operation Targets 200,000+ Bank Employees in Coordinated Credential Theft Attack Cyber Threat Intelligence AegironJanuary 16, 2026January 16, 20269 mins0 Reported: January 16, 2026Threat Type: Phishing-driven credential harvestingTarget Scope: 200,000+ U.S. bank employeesPrimary Objective: Unauthorized account access…continue reading..
