iiinova — where your digital self keeps evolving

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 3h

🧭 How Play is documented to operate · Valid Accounts · Valid Accounts: Domain Accounts · Valid Accounts: Local Accounts · External Remote Services MITRE ATT&CK techniques attributed to Play overall — not a finding about how this organisation was reached.

000

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 3h

🏴 Initially observed in June 2022, the Play ransomware (a.k.a PlayCrypt) operates through double extortion, targeting numerous organizations in Latin America.

100

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 3h

000

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 3h

🏴 Initially observed in June 2022, the Play ransomware (a.k.a PlayCrypt) operates through double extortion, targeting numerous organizations in Latin America.

100

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 7h

🧭 How Qilin is documented to operate · Valid Accounts · Exploit Public-Facing Application · Phishing · Phishing: Spearphishing via Service MITRE ATT&CK techniques attributed to Qilin overall — not a finding about how this organisation was reached.

000

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 7h

🏴 Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator.

100

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 7h

000

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 7h

🏴 Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator.

100

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 7h

000

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 7h

🏴 Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator.

100

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 7h

🏢 Nipigon District Memorial Hospital offers a range of healthcare services including diagnostic imaging, lab services, physiotherapy, and an assisted living program. The hospital aims to serve patients and residents in the Nipigon district, focusing on community health and well-being.

000

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 7h

000

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 7h

🏴 Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator.

100

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 9h

🧭 How Thegentlemen is documented to operate · Valid Accounts · Valid Accounts: Domain Accounts · External Remote Services · Exploit Public-Facing Application MITRE ATT&CK techniques attributed to Thegentlemen overall — not a finding about how this organisation was reached.

000

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 9h

🏴 The Gentlemen is a RaaS group that emerged in July–August 2025, rapidly claiming over 320 victims across 17+ countries by offering affiliates a 90% revenue share, deploying a Go-based locker against Windows, Linux, NAS, and BSD systems; a compromised C2 server in 2026 revealed more…

100

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 9h

🏢 340GB Center State Engineering is a privately held civil engineering consultancy founded in 1997 and based in Monroe Township, New Jersey. It serves municipal and private clients with engineering, surveying, land planning, inspection, and construction management.

100

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 9h

🏴 Krybit is an emerging RaaS group that launched in late March 2026, offering affiliates an 80/20 revenue split with support for Windows, Linux, ESXi, and NAS device encryption, and became notable for a public feud with rival group 0APT in which each breached and leaked the other's…

000

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 9h

🏢 Dar Al-Tib is one of Egypt's and the Middle East's first and leading centers specializing in infertility treatment and a.

100

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 9h

000

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 9h

🏢 Groupe Euroditel is a French telecommunications and IT systems integrator founded in 1966, headquartered in Bagneux, Îl.

100

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 9h

🏴 PayoutsKing is an active ransomware group observed through at least 2026 that has claimed attacks against a wide range of industries internationally — including Del Monte Foods and V. FRAAS — across the US, UK, Germany, and Ireland using standard double-extortion tactics.

000

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 9h

000

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 9h

🏴 Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator.

100

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 9h

🏴 Dire Wolf is a sophisticated human-operated ransomware group first documented in May 2025, written in Golang using Curve25519/ChaCha20 encryption, targeting manufacturing and technology sectors across 13+ countries with ransoms up to $500,000, operated by a tight core team rather…

000

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 9h

000

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 9h

🏢 Empaques y Servicios Superiores S.A.S. (SUPERPACK) is a Colombian medium-sized company founded on January 12, 1999, head.

100

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 03/10/2026

000

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 03/10/2026

🏴 Qilin ransomware was first observed in July of 2022. Qilin Ransomware is written in Golang and supports multiple encryption modes; all of which are controlled by the operator.

100

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 03/10/2026

🏴 NetRunner is a ransomware group active from at least 2025 targeting diverse sectors including healthcare, telecommunications, manufacturing, and agriculture across Japan, Italy, the US, and Jordan, notably demanding a $100M ransom from Nippon Medical School Musashi Kosugi Hospital.

000

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 03/10/2026

🏢 Precon Marine, Inc. is a diversified marine contractor specializing in heavy marine construction and advanced subsea services.

100

Cyber Threat Intelligence Daily @cyberintelligence.bsky.social · 03/10/2026

🧭 How Rhysida is documented to operate · Abusing Elevation Control Mechanism: Bypass User Account Control · Phishing · Command and Scripting Interpreter · Shared Modules MITRE ATT&CK techniques attributed to Rhysida overall — not a finding about how this organisation was reached.

000