23rd March – Threat Intelligence Report
2026-03-24T20:52:35Z•4b5b480361c37ff919051febb200600f57b672ff3715b0b782dad54e4b97e4c6
ai-securityamaranth-dragonapi-token-exfiltrationapt41china-aligned-aptclaude-codecvecybercrimedata-breachespionagehack-and-leakhandala-hackip-camera-compromiseiranian-actorsransomwarercesilver-dragonthreat-intelvoid-manticorevulnerability
What happened
Check Point Research bulletin (Feb–Mar 2026) covering multiple active campaigns, high‑impact breaches, and critical product vulnerabilities. Notable incidents and findings include large data breaches and ransomware/extortion claims (Navia Benefit Solutions, Stryker, AkzoNobel, Wynn, Odido, Conpet), a detailed profile of the Iranian destructive actor “Handala Hack” (aka Void Manticore) and increased Iran‑MOIS engagement with cybercrime ecosystems, the emergence of a China‑aligned cluster “Silver Dragon” (operationally correlated with APT41) targeting Southeast Asia and Europe, and analysis of “
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- checkpoint_research
- Record identifier
- 4b5b480361c37ff919051febb200600f57b672ff3715b0b782dad54e4b97e4c6
- Enrichment time
- 2026-03-24T20:52:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.