149 Hacktivist DDoS Attacks Hit 110 Organizations in 16 Countries After Middle East Conflict
2026-03-05T01:24:18Z•772fbeb9ab07e11a1ab9d31df094190d2b8a7349d72c035789450456ec932a70
CVE-2026-0628CVE-2026-21385CVE-2026-21513CVE-2026-22719APTAPT28APT41CISA-KEVCobalt StrikeCorunaDDoSHavocOAuth-redirect-abusePackagistRATScarCruftSilver DragonVMware-Ariaactive-exploitationbackdoorblockchain-C2','Aeternum'exploit-kithacktivismiOSmalicious-packagesnpmphishingsupply-chaintrojanized-module
What happened
A broad set of active threats and supply-chain abuses were reported: a surge of hacktivist DDoS attacks after Middle East hostilities; a powerful iOS exploit kit (Coruna/CryptoWaters) with five exploit chains affecting iOS 13–17.2.1; multiple malicious package campaigns (Packagist, npm, trojanized Go module) delivering cross‑platform RATs and backdoors; and APT activity (Silver Dragon linked to APT41, APT28, ScarCruft, North Korean clusters) leveraging phishing, Cobalt Strike, Havoc C2, Google Drive/ Pastebin/Zoho WorkDrive for command-and-control. Several high‑severity, actively exploited/vs‑
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 772fbeb9ab07e11a1ab9d31df094190d2b8a7349d72c035789450456ec932a70
- Enrichment time
- 2026-03-05T01:24:18Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.