Cybersecurity articles tagged #Threat Actor on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/jewelbug-apt-dual-motivation-espionage-crypto-heistshttps://runtimerebel.com/blog/jewelbug-apt-dual-motivation-espionage-crypto-heistsJewelbug APT, a unique 'hackers-for-hire' group, conducts state-sponsored espionage and financially motivated cryptocurrency heists from a single operational panel.Thu, 13 Aug 2026 16:47:11 GMTCyber EspionageCryptocurrency TheftThreat ActorFinancially MotivatedJewelbug APThttps://runtimerebel.com/blog/deepseek-ai-hermes-agent-autonomous-server-exploitationhttps://runtimerebel.com/blog/deepseek-ai-hermes-agent-autonomous-server-exploitationA threat actor is leveraging DeepSeek AI and the Hermes Agent for autonomous attacks against vulnerable, internet-exposed servers, demanding urgent defense.Fri, 31 Jul 2026 17:42:21 GMTDeepSeek AIHermes AgentAutonomous AttackAI in HackingServer ExploitationThreat Actorhttps://runtimerebel.com/blog/google-gemini-cli-abused-by-bandcampro-for-botnet-operationshttps://runtimerebel.com/blog/google-gemini-cli-abused-by-bandcampro-for-botnet-operationsRussian-speaking threat actor 'bandcampro' is leveraging Google's Gemini CLI as a hacking agent and to command a small-scale botnet.Wed, 15 Jul 2026 21:05:52 GMTBandcamproGoogle Gemini CLIAI AbuseBotnetThreat ActorTTPhttps://runtimerebel.com/blog/unc6692-leverages-teams-aws-s3-for-malware-cloud-abusehttps://runtimerebel.com/blog/unc6692-leverages-teams-aws-s3-for-malware-cloud-abuseNewly discovered threat actor UNC6692 combines social engineering via Microsoft Teams with custom 'Snow' malware and AWS S3 cloud abuse in multi-pronged attacks.Mon, 27 Apr 2026 20:30:32 GMTUNC6692Microsoft TeamsAWS S3SNOW MalwareSocial EngineeringCloud AbuseThreat Actorhttps://runtimerebel.com/blog/the-gentlemen-ransomware-group-rapid-escalation-and-sophisticationhttps://runtimerebel.com/blog/the-gentlemen-ransomware-group-rapid-escalation-and-sophisticationAn analysis of 'The Gentlemen' ransomware group, highlighting their rapid operational scaling and sophisticated attack methods impacting organizations globally.Thu, 23 Apr 2026 00:46:56 GMTThe GentlemenRansomwareThreat ActorCybercrimehttps://runtimerebel.com/blog/teampcp-supply-chain-attacks-escalate-amidst-hacker-infightinghttps://runtimerebel.com/blog/teampcp-supply-chain-attacks-escalate-amidst-hacker-infightingRuntime Rebel details how TeamPCP's supply chain attacks are leading to breaches, with ShinyHunters and Lapsus$ adding to the chaos.Fri, 03 Apr 2026 16:18:40 GMTTeamPCPShinyHuntersLapsusSupply Chain AttackBreachThreat Actorhttps://runtimerebel.com/blog/chinese-cyber-threat-persistent-espionage-in-critical-asian-sectorshttps://runtimerebel.com/blog/chinese-cyber-threat-persistent-espionage-in-critical-asian-sectorsAn undefined Chinese-speaking actor conducts long-term cyber espionage against critical Asian sectors using custom malware and living-off-the-land binaries.Mon, 09 Mar 2026 16:35:16 GMTChinese APTEspionageWindowsLinuxLOTLCustom MalwareCritical InfrastructureThreat Actorhttps://runtimerebel.com/blog/cyberstrikeai-leveraged-in-ai-driven-fortigate-attacks-across-55-countrieshttps://runtimerebel.com/blog/cyberstrikeai-leveraged-in-ai-driven-fortigate-attacks-across-55-countriesAn open-source AI platform, CyberStrikeAI, is deployed in sophisticated, AI-driven attacks targeting Fortinet FortiGate appliances globally.Tue, 03 Mar 2026 16:22:24 GMTCyberStrikeAIFortiGateAI Driven AttacksTeam CymruThreat ActorOpen Sourcehttps://runtimerebel.com/blog/ransomware-group-targets-healthcarehttps://runtimerebel.com/blog/ransomware-group-targets-healthcareThe BlackMesh ransomware syndicate has shifted targeting to hospitals and healthcare networks across North America and Europe, leveraging stolen VPN credentials and…Sat, 20 Jan 2024 00:00:00 GMTRansomwareHealthcareThreat ActorCitrix BleedVPN