Obscura, an obscure new ransomware variant

Published on September 24, 2025

Huntress analysts discovered a previously unseen ransomware variant, Obscura, spreading from a victim company's domain controller. Learn how Obscura works—and what it means for defenders—in this week's Tradecraft Tuesday. [...]

Continue reading on website
Other news

Google: Brickstorm malware used to steal U.S. orgs' data for over a year

September 24, 2025
Suspected Chinese hackers have used the Brickstorm malware in long-term persistence espionage operations against U.S. organizations in the technology and legal sectors. [...]

UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors

September 24, 2025
Companies in the legal services, software-as-a-service (SaaS) providers, Business Process Outsourcers (BPOs), and technology sectors in the U.S. have been targeted by a suspected China-nexus cyber espionage group to deliver a known backdoor referred to as BRICKSTORM.The activity, attributed to UNC5221 and closely related, suspected China-nexus threat clusters, is designed to facilitate