Durov’s revenge
The arrest of Pavel Durov, the founder of Telegram, has caused a stir in the cyber world. So much so that cybercriminals, especially those with a hacktivist bent, have decided to take a stand in favour of him, perpetrating various attacks against France. In this special report we tell you all the details about this revenge carried out by groups such as RipperSec and Cyberdragon.
- REPORT
- X63 UNIT
![](/dam/jcr:2d333724-b720-480d-8093-2459462e4a65/Durovs%20revenge.png)
Noname057 Threat Actor Report
Have you heard about the recent arrests in Spain of the Noname057 group? In this report we tell you all about it and how this hacktivist group carries out its operations as well as explore one of its main characteristics: revenge. Don't miss it!
- REPORT
- X63 UNIT
![](/dam/jcr:1e04d364-3ba0-4af1-aa18-bd1d317f262c/Noname.png)
Relatório Cultural da IAB (versão em inglês)
Este relatório detalha o papel crucial dos Corretores de Acesso Inicial (IABs) no ecossistema de cibercrime.
Os IABs são especialistas que facilitam o acesso a redes corporativas para grupos de ransomware, hacktivistas e grupos de ameaça persistente avançada (APT). Eles operam dentro de um mercado bem estruturado, frequentemente usando fóruns cibercriminosos, especialmente aqueles hospedados no Tor, para vender acesso não autorizado a sistemas.
Saiba mais sobre o aumento da sofisticação dos ataques cibernéticos devido aos IABs e a necessidade de reforçar as defesas de cibersegurança.
- REPORT
- X63 UNIT
![](/dam/jcr:1244b515-dca5-4908-9026-d739044d815a/IAB%20cultural%20report.png)
Adversarially Weekly Report (August 29 - September 5)
Stay ahead of the curve with the latest threat intelligence report from Unit x63!
Learn about the latest threats, vulnerabilities and everything that's happening in the ransomware landscape.
- REPORT
- X63 UNIT
![](/dam/jcr:8c92049f-a0dc-42e5-af6e-c60cc22f5c69/Aug29-sep5.png)
Adversarially Weekly Report (August 22 - August 29)
This week, the detention of Pavel Durov, the founder of Telegram, sparked a wave of cyber retaliation. Groups like UserSec and CyberDragon launched DDoS attacks against key French institutions, showing how quickly global events can escalate into significant cyber threats.
Our report also covers other critical developments, including new ransomware cases and emerging vulnerabilities.
Stay informed and prepared—dive into the full report for detailed insights.
- REPORT
- X63 UNIT
![](/dam/jcr:530b046f-e37a-4ee1-95f9-eae37eaf7ad8/Weekly%2022-29%20ago.png)
Adversarially Weekly Report (August 15 - August 22)
This week we have seen that the cyber-attack scene has slowed slightly, but we must not become complacent, as cybercriminals do not rest even during the summer!
Visit our weekly and check out all the relevant news.
- REPORT
- X63 UNIT
![](/dam/jcr:40522419-1319-4b30-8c51-fbc65aa76207/Weekly%2015-22%20ago.png)
Adversarially Weekly Report (August 8 - August 15)
This week has seen a major activation of hacktivist groups in the wake of political tensions in Venezuela. But we have also seen Lockbit come back on the scene, with a higher number of victims than in previous months... Could this be a new reactivation? On the other hand, it seems that we have several quite serious vulnerabilities that will have to be patched as soon as possible. Stay tuned and don't miss any news with our weekly update.
- REPORT
- X63 UNIT
![](/dam/jcr:c43f54ed-cae6-4538-b31a-bf9f0df8b03f/Weekly%208-13%20ago.png)
Adversarially Weekly Report (August 1 - August 8)
Another week in which cybercriminals give no respite, even though it is summer! This week there have been several serious attacks against hospitals and health centres, which can have serious consequences. In addition, the so far little known ransomware group "Meow" is at the top of this week's list. Read all the information in our report.
- REPORT
- X63 UNIT
![](/dam/jcr:96d4529b-bba3-458d-bf0a-58c9d85d2e4e/Weekly%201-8%20ago.png)
Adversarially Weekly Report (July 25 - August 1)
A new week in which numerous leaks, new denial-of-service attacks against Spain by different groups and an increase in ransomware attacks around the world stand out. Discover all the news and more by reading our weekly!
- REPORT
- X63 UNIT
![](/dam/jcr:e67ad4e2-9c44-4769-a391-80575ca585bf/Weekly%2025-1%20ago.png)
Adversarially Weekly Report (July 18 - July 26)
Most of us are on vacation, but cybercriminals, notably LockBit, do not stop working even during the summer.
Find out all the details by reading our weekly report!
- REPORT
- X63 UNIT
![img weekly 18 al 26 jul 24](/dam/jcr:5d88396d-177e-45c9-a841-7c79c03596ae/cipher%20resources%20weekly%2018%20al%2026%20jul%2024.webp)
Adversarially Weekly Report (July 11 - July 18)
In this new release, we highlight a several number of leaks from underground actors as well as a growth in the ransomware ecosystem.
Read our report for all the details and stay alert.🔒
#Databreach #Leaks #Ransomware #Cipher
- REPORT
- X63 UNIT
![](/dam/jcr:eca30182-486b-47d6-87ab-f4e7c15bcc96/Weekly%20jul%2011%2018.png)
Adversarially Weekly Report (July 4 - July 11)
This week's major disclosures include the X (previously Twitter) leak, a super active vulnerability section and our ransomware page with Akira leading the way. Find out all the details by reading our weekly report! 🔒
#Databreach #Leaks #Ransomware #Cipher
- REPORT
- X63 UNIT
![](/dam/jcr:82218f23-9ecf-494f-b7c4-5f3c86b7de36/Weekly%204-11%20july.png)
Adversarially Weekly Report (June 27 - July 4)
This week we return with a vengeance. Despite the fact that summer is approaching, fraudsters appear to be working hard. From the TeamViewer breach to the NTT Data breach, to european headlines like the arrest of "Guardiacivilx," a threat actor who was selling access. Don't miss a thing!
- REPORT
- X63 UNIT
![](/dam/jcr:1463d9f7-10bd-4b2b-a97f-32b194d67d97/weekly%2027-3%20july.png)
Adversarially Weekly Report (June 20 - June 27)
The weekly report for June 20-27, 2024, highlights major cybercrime activities, including the Lockbit publication of sensitive US Federal Reserve data, the launch of KillSec 2.0 ransomware, and various phishing attacks. Breaches involving Bosch, Schneider Electric, and Levi Strauss are noted, along with significant vulnerabilities like CosmicSting. Ransomware and dark web exploit sales are also detailed. Stay informed and secure—don't miss it!
- REPORT
- X63 UNIT
![](/dam/jcr:ae18e2b6-2cb1-4b44-84cf-562ef626483e/Weekly%2020-27%20june.png)
Adversarially Weekly Report (June 13 - June 20)
This week brings the return of a key player with significant leaks, multiple phishing campaigns, and our ransomware section. Check out our weekly report for more details! 🔒
#Databreach #Phishing #Ransomware #Cipher
- REPORT
- X63 UNIT
![](/dam/jcr:8e431c92-5fec-46d5-835f-3237a8905069/Weekly%20june%2013-20.png)
Adversarially Weekly Report (June 6 - June 13)
In a week filled with attacks and leaks worldwide, three cybercrime operations stand out that will definitely make headlines. Read our weekly report to catch up on all the events and check out the 'Special Ops' section!
#DataLeaks #SpecialsOPs #Cipher #Cybersecurity
- REPORT
- X63 UNIT
![](/dam/jcr:8e148e0c-b153-48f5-89a9-97fab48af8ff/Weekly%206-13%20june.png)
🔍 Sector Report: Trading & Crypto | June 2024
Because of its tremendous economic potential, the trading and cryptocurrency sectors are becoming increasingly attractive targets for cybercriminals, with ransomware, data theft, and financial fraud constituting substantial threats. High-profile criminals, including the Lazarus Group and FIN7, are aggressively exploiting vulnerabilities with programs such as Qbot and RemcosRAT.
Our most recent report reveals an increase in targeted attacks, stressing the importance of strong cybersecurity safeguards.
Cipher's cutting-edge solutions can help you stay ahead of any threats.
#CyberSecurity #Trading #Crypto #FinancialSecurity #Cipher
- REPORT
- X63 UNIT
![](/dam/jcr:fdc8cb43-0c46-4f2a-b9e5-d312c48113b9/Trading%20and%20Crypto.png)
New PCI-DSS 4 Regulation (Spanish version) Is your company prepared to comply?
On April 1, 2024, PCI-DSS v4.0 came into effect, with a deadline for implementation set for March 31, 2025.
Join the webinar where we will discuss the new requirements and the necessary measures to ensure that your company meets the changes in the PCI DSS 4.0 standard.
- WEBINAR
![](/dam/jcr:c88263f5-3e4a-41d6-88db-d8c9c78015c9/______Captura%20de%20pantalla%202024-07-09%20132830.5448125277574198478.2729176505158917360.png)
Adversarially Weekly Report (May 30 - June 6)
We might be facing the week with the most leaks in recent times, along with several attacks targeting Spain.
Find out all the details by reading our weekly report!
- REPORT
- X63 UNIT
![](/dam/jcr:3d1ac67c-05f8-4b55-a528-5e9f5a49d4f5/weekly%2030may%206jun%20image.webp)
Adversarially Weekly Report (May 23 - May 30)
It has been a tragic week for cybersecurity in Spain, with several attacks and leaks.
BreachForums is back, or so we want to believe! Read our weekly to find out all about it.
- REPORT
- X63 UNIT
![](/dam/jcr:df552030-aa52-4efc-87a0-0235c0242357/Weekly%2023-30%20may.png)
Adversarially Weekly Report (May 16 - May 23)
From new campaigns such as Kimsuky's campaign via Facebook Messenger or the resurgence of the Grandoreiro malware, to the campaign waged by AnonymousEgypt against the Santander Mexico bank. All this news and more in our weekly report.
- REPORT
- X63 UNIT
![](/dam/jcr:5bd82a54-0bac-4285-965d-11b174ec6be2/weekli%2016-23%20may.png)
Adversarially Weekly Report (May 9 - May 16)
This week has been intense with leaks and vulnerabilities, not to mention the downfall of Breach Forum and new victims of LockBit.
Check out our weekly report to stay informed on everything!
- REPORT
- X63 UNIT
![](/dam/jcr:eaa409a4-9c5b-4174-87b8-556176c14f73/Weekly%209-16%20MAY.png)
Lockbit OP. Chronos Report
Since February, the NCA, FBI, Interpol, and other organizations have carried out one of the major operations against Lockbit, the dominant ransomware gang in the globe.
The x63 Unit has gone over this operation step by step, resulting in this interesting report on a topical issue.
- REPORT
- X63 UNIT
![](/dam/jcr:c65fa0a0-c4f8-482c-97bf-8d8d68a628fe/Lockbit.png)
Adversarially Weekly Report (Apr 25 - May 9)
Check out our latest roundup of the most relevant cybersecurity news from the past two weeks! Featuring the alleged identity of @Lockbitsupp and the resurgence of LockBit with new victims. Stay informed with our updates! 🔒
- REPORT
- X63 UNIT
![](/dam/jcr:afc657be-3b8e-49a9-850b-d2b2b9c732b6/Weekly%2025-10.png)
Adversarially Weekly Report (Apr 18 - Apr 25)
This week, multiple campaigns and various leaks of highly sensitive information have been detected. Additionally, significant vulnerabilities have been found in GitHub and VirtualBox.
Check out our weekly report and stay informed on everything!
- REPORT
- X63 UNIT
![](/dam/jcr:4a2a3848-d0a0-478b-b3ea-e4a26a3d625c/x63%20weekly%20report%2018-25%20abril.webp)
Adversarially Weekly Report (Apr 11 - Apr 18)
We reported on a fatal news story this week, disclosed the breach of multiple databases, and discussed a Telegram vulnerability.
Check out our weekly report, where we go into great detail about everything!
- REPORT
- X63 UNIT
![](/dam/jcr:c3686e68-aab6-457c-9399-41851a98eb58/weekly11-18.webp)
Adversarially Weekly Report (Apr 4 - Apr 11)
This week has focused on the leaks of various databases. But that's not all, we can't forget the two Zero Day vulnerabilities in Google Pixel phones or the Spanish phishing campaign using the pretext of the tax return. We tell you all about it in our weekly report. Don't miss it!
- REPORT
- X63 UNIT
![](/dam/jcr:62e8fda4-a32a-481b-ae76-f3fee1aa3e89/Portada%20weekly%204apr.png)
Akira Threat Actor Report
Did you know about the Akira ransomware group? It is a group that started in March 2023, and apparently has certain ties to the former Conti. Akira is becoming increasingly active and we have decided to study it in depth. In the following report, we tell you some basic facts about this actor.
- REPORT
- X63 UNIT
![](/dam/jcr:c25fbe1d-0c61-473f-9fc4-8c11f5915109/Akira%20portada.webp)
Adversarially Weekly Report (Mar 21 - Apr 4)
How was your holiday? For the cybercriminals, it seems they haven't! We have seen a sharp increase in cyber-scamming of targeted individuals. But we have also had a lot of partying with the XZ Utils vulnerability, among many other things. Don't miss our report.
- REPORT
- X63 UNIT
![](/dam/jcr:aa153cbf-dc85-49f0-a61e-c813d63349da/Weekly%20Mar21-Abr4.png)
Adversarially Weekly Report (Mar 14 - Mar 21)
This week we have a new debutant... RAWorld! A new ransomware that comes in strong, with 30 victims, a very high number. We also bring you the most relevant news on the latest data leaks that have occurred in the cyber world, such as the AT&T breach. Don't forget to follow our advice in the warning's section!
- REPORT
- X63 UNIT
![](/dam/jcr:f8cf1f24-e781-4f98-ac63-374cb686df92/weekly%2014-21,%202024.png)
Adversarially Weekly Report (Mar 7 - Mar 14)
This week seems to bring a wide range of news, from hacktivists, malware, ransomware and vulnerabilities, there's a mix of them all on the scene. Keep an eye out for our warnings, as they will help you to be more secure.
- REPORT
- X63 UNIT
![](/dam/jcr:a4cf043f-fe34-40eb-8a1a-daa2ca7afd82/Portada%20weekly%207-14-mar.png)
Health Sector Research Report
At last, a report revealing the depths of truth. Finally, we know how they operate, and finally, we understand their tools... everything truly essential to know about the past year in the healthcare sector from a unique perspective: the digital adversary. Learn who they are and how they operate to safeguard yourself. Meticulous work from the x63unit...
- REPORT
- HEALTH SECTOR
![](/dam/jcr:a3cd011c-5581-4365-aa52-1bbd7e9aa2b6/Portada-Health-report.png)
Adversarially Weekly Report (Feb 29 - Mar 7)
This week we have seen the most varied things! On the one hand the DDoS attack on Facebook and Instagram that managed to paralyze the service for a few brief moments, claimed by Anonymous Sudan, but we also have other things like the American Express data leaks or the phishing that is taking place at Pepco. Stay tuned and raise the barriers!!!
- REPORT
- X63 UNIT
![](/dam/jcr:e2fa2956-7e5f-4f32-8c1b-338ac6f0ba43/Weekly%20Feb%2029%20-%20Mar%207,%202024.png)
Adversarially Weekly Report (22-29 February)
We thought Lockbit had disappeared? Well, like a phoenix, it seems to be rising from the ashes.
It also seems that the global health care system is undergoing several shocks.
- REPORT
- X63 UNIT
![](/dam/jcr:af7ccc19-c81c-4684-a45b-87cdf1e32ceb/weekly.png)
Adversarially Weekly Report (15-22 February)
This week's main news was the arrest of Lockbit, where the brilliant work of cooperating authorities from different countries managed to strike a major blow against the gang.
The fight against cybercrime continues to be on fire and getting better and better. But we cannot let our guard down, cybercriminals are always looking for new techniques and methods!
- REPORT
- X63 UNIT
![](/dam/jcr:9b30bf37-c237-4064-a326-c4f2c5b755fd/Weekly%20report%20miniatura%2004-11-2024.png)
Adversarially Weekly Report (08-15 February)
This week has been a game changer, especially for the healthcare sector, with emerging trends reshaping the landscape.
But here's the kicker – while we're on the topic, have you heard about the most recent attack on Bank of America? Are you prepared for the unexpected? We are the insiders on all the information you require.
- REPORT
- X63 UNIT
![](/dam/jcr:9b30bf37-c237-4064-a326-c4f2c5b755fd/Weekly%20report%20miniatura%2004-11-2024.png)
Adversarially Weekly Report (1-8 February)
This week we've detected an increase in ransomware attacks, a clear sign that the dark side is stepping up their game. But fear not, we're on it, analyzing data and bolstering defenses to shut the door on these digital bandits.
But there's more. We've also set our sights on application vulnerabilities like AnyDesk, Vmware, Forti, Cisco... Because in this game, a small crack is all the bad guys need to slip through.
- REPORT
- X63 UNIT
![](/dam/jcr:9b30bf37-c237-4064-a326-c4f2c5b755fd/Weekly%20report%20miniatura%2004-11-2024.png)
Adversarially Weekly Report (25 Jan - 1 Feb)
In the next two years, ransomware threats may rise as a result of AI. It was recently reported that a number of organizations are already creating and providing generative criminal intelligence as a service. This also makes it possible for less skilled threat actors to launch cyberattacks.
- REPORT
- X63 UNIT
![](/dam/jcr:9b30bf37-c237-4064-a326-c4f2c5b755fd/Weekly%20report%20miniatura%2004-11-2024.png)
Adversarially Weekly Report (19-25 January)
One of the biggest leaks in history has taken place this week. The enemies of the underground are on fire. If you're curious about the nitty-gritty details, you'll find the whole scoop in our weekly report. We've got the lowdown on everything you need to know.
- REPORT
- X63 UNIT
![](/dam/jcr:9b30bf37-c237-4064-a326-c4f2c5b755fd/Weekly%20report%20miniatura%2004-11-2024.png)
Adversarially Weekly Report (12-18 January)
Last week was pretty intense regarding Ransom attacks, especially with our LATAM buddies with services exposed to the internet (Elastic, MYSQL, RDP, etc). If you're curious about the nitty-gritty details, you'll find the whole scoop in our weekly report. We've got the lowdown on everything you need to know.
- REPORT
- X63 UNIT
![](/dam/jcr:9b30bf37-c237-4064-a326-c4f2c5b755fd/Weekly%20report%20miniatura%2004-11-2024.png)
Adversarially Weekly Report (04-11 January)
Check out our Adversarially Weekly Report made by our X63 Unit. The main reason for our heightened concern is the threat posed by GEOs, trends, and ransomware.
At X63 Unit, we're not your average cybersecurity squad. We're a tight-knit crew of experts, and our superpower? Unmasking the digital baddies! In this weekly report we're not just about putting a face to the villains; we're all about understanding their every trick, tactic, and sneaky procedure.
- REPORT
- X63 UNIT
![](/dam/jcr:9b30bf37-c237-4064-a326-c4f2c5b755fd/Weekly%20report%20miniatura%2004-11-2024.png)