Every 4 hours

Cyber

Original briefings from the security press, rewritten for operators. Each story keeps the date of the report it is based on, links the identifiers it discusses, and points back to the original publication.

Threat intelligence

Trackers and reporting desks followed on the same four-hour update. New public reports are rewritten into the briefings below.

PrioritySourceWebsiteInformation
Ransomware.liveWebsiteRansomware.liveInformationRansomware groups, victims, incidents
The DFIR ReportWebsiteThe DFIR ReportInformationDetailed intrusion investigations
SANS Internet Storm CenterWebsiteSANS ISCInformationAttack observations and incident analysis
abuse.ch ThreatFoxWebsiteThreatFoxInformationIndicators of compromise
abuse.ch URLhausWebsiteURLhausInformationMalware distribution infrastructure
abuse.ch MalwareBazaarWebsiteMalwareBazaarInformationMalware hashes and metadata
abuse.ch Feodo TrackerWebsiteFeodo TrackerInformationBotnet command-and-control infrastructure
AlienVault OTXWebsiteAlienVault OTXInformationCommunity threat-intelligence indicators
PhishTankWebsitePhishTankInformationPhishing intelligence
Shadowserver FoundationWebsiteShadowserverInformationInternet exposure and threat reporting
  1. Oct 14, 2026 · Krebs on Security

    UK Imposes Sanctions on Cryptomus for Facilitating Russian Cybercrime

    The UK government has sanctioned Cryptomus, a cryptocurrency platform implicated in facilitating Russian cybercrime and money laundering activities.

    What changed

    The United Kingdom has enacted economic sanctions against Cryptomus, a cryptocurrency platform identified as a significant facilitator of payments for various illicit activities. This action aims to curb the platform's role in enabling Russian entities to bypass financial restrictions.

    Experts have highlighted Cryptomus's involvement in supporting ransomware operations, narcotics trafficking, and other cybercrime services that contribute to the ongoing financial challenges faced by Russia.

    Who is affected

    The sanctions target Cryptomus directly, impacting its operations and the users who rely on its services for cryptocurrency transactions.

    Additionally, organizations and individuals engaged in ransomware, narcotics, and darknet markets may find their activities scrutinized due to their association with the platform.

    • Cryptomus, the cryptocurrency platform under sanctions.
    • Individuals and groups involved in ransomware operations.
    • Entities participating in darknet markets and fraud schemes.
    • Financial institutions monitoring transactions linked to Cryptomus.

    What to do

    Organizations should review their cryptocurrency transaction policies and ensure compliance with the latest sanctions. It is crucial to assess any existing relationships with Cryptomus and take appropriate action to mitigate risk.

    Monitoring for transactions that may involve Cryptomus or similar platforms will be essential in maintaining compliance and preventing potential legal repercussions.

    • Review and update cryptocurrency transaction policies.
    • Assess relationships with Cryptomus and related entities.
    • Implement monitoring for transactions linked to sanctioned platforms.
    • Stay informed about further developments in sanctions and regulatory requirements.

    Original report