The Lynx Ransomware group has been increasingly active, employing sophisticated social engineering techniques and exploiting various vulnerabilities to conduct ransomware attacks on large organisations. Their TTPs include impersonation of IT staff and the abuse of legitimate tools to gain unauthorised access, culminating in data encryption and exfiltration. This post presents a technical analysis of a[…] Read

A newly discovered malware strain named LameHug is turning heads by becoming the first publicly documented malware to use a large language model (LLM) to generate real-time system commands during an active attack. Uncovered by Ukraine’s national CERT, the malware is believed to be linked to the Russian state-backed group APT28 (also known as Fancy[…] Read

How Malicious AI is Reshaping the Threat Landscape  Not long ago, artificial intelligence was seen as the key defender in cyber security, identifying threats, blocking malware and safeguarding networks. But what happens when AI joins the dark side? Welcome to the unsettling world of Dark AI, where artificial intelligence is weaponised to automate cyberattacks, outpace[…] Read

There have been an unprecedented number of cyber-attacks affecting large UK brands over the last few weeks, and this is understandably causing concern. At this point, the information available to us about these attacks is vague. This is normal in these circumstances because the organisations affected by these attacks will not want to compromise their[…] Read

CybaVerse are committed to equipping organisations with the knowledge and tools to combat sophisticated cyber threats. One such threat is Scattered Spider, a financially motivated hacking group known for its advanced social engineering tactics and ransomware attacks. Drawing from the National Cyber Security Centre’s (NCSC) Threat Hunting Guide on Scattered Spider (Version 1.0, dated 03/05/2025), this blog[…] Read