8th June – Threat Intelligence Report
2026-06-08T20:52:29Z•06ea3aa3eac5925409e42f76c83bae2fd6a19cf935ac966739e37dd9364a7906
AI‑enabled attacksLapsus$Nimbus ManticoreOAuth token theftRaaSShinyHuntersSystemBCTDSTeamPCPThe GentlemenUNC1549VECTclick hijackingdata breachdata leak site (DLS)exfiltrationimpersonationmalware distributionransomwareransomware‑as‑a‑servicesupply chainsupply‑chain compromisethreat intelligencewiper
What happened
Collection of Check Point Research posts (Apr–Jun 2026) covering a surge of high‑impact incidents and actor activity: multiple large data breaches and source‑code leaks (DentaQuest, Carnival, 7‑Eleven, Vodafone, Booking.com, Instructure, Medtronic, Vercel), ransomware and RaaS activity (The Gentlemen, VECT, TeamPCP), Iran‑nexus destructive/espionage operations (Nimbus Manticore / UNC1549), and a detailed look at malware distribution techniques (impersonation, click‑hijacking, TDS) and proxying (SystemBC). Research also documents the evolution of AI in offensive operations (real‑time autonomous
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- checkpoint_research
- Record identifier
- 06ea3aa3eac5925409e42f76c83bae2fd6a19cf935ac966739e37dd9364a7906
- Enrichment time
- 2026-06-08T20:52:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.