The Bear and The Shell: New Campaign Against Russian Opposition
The Bear and The Shell: New Campaign Against Russian Opposition
January 30, 2024

Cluster25 uncovered a newly initiated campaign likely associated with a Russian APT (Advanced Persistent Threat) group. ...

The Duck is Hiring in Italy: DUCKTAIL Spread via Compromised LinkedIn Profiles
The Duck is Hiring in Italy: DUCKTAIL Spread via Compromised LinkedIn Profiles
October 25, 2023

Cluster25 observed a malicious campaign that employs LinkedIn messages as a vector for executing identity theft attacks....

Cluster25 has become partner of DNS0 Project
Cluster25 has become partner of DNS0 Project
May 2, 2023

We are pleased to announce to have become a partner of the DNS0 Project, the European security-oriented DNS born to prot...

Cluster25 joins the VirusTotal community
Cluster25 joins the VirusTotal community
March 16, 2023

We are proud to announce that Cluster25 has joined the VirusTotal community, improving its website/domain scanning engin...

Erbium InfoStealer Enters the Scene: Characteristics and Origins
Erbium InfoStealer Enters the Scene: Characteristics and Origins
September 15, 2022

On the 21st of July 2022 on a DWW (Deep/Dark Web) forum, a Russian speaking threat actor created an announcement about t...