Cyber Intelligence Hub

Reduce your cyber risk and enhance your security posture with our expert resources. We provide the intelligence and strategies you need to protect your organization from evolving cyber threats.
AllCTICybercrimeDark Web
Revolut data breach extortion site infrastructure analysis
Cybercrime

September 15, 2026

Revolut Data Breach: Tracing the Extortion Site InfrastructureRevolut confirmed on 12 September 2026 that it disclosed customer files to a third party who submitted fraudulent information requests from a legitimate government agency email domain. A threat actor
WordPress exploits traded on cybercrime forums
Cybercrime

September 3, 2026

WordPress Exploits on Cybercrime Forums: What Threat Actors Are SellingWordPress exploits are advertised, auctioned, and resold on cybercrime forums alongside high-value Windows zero-days. KELA tracked listings ranging from a USD 100 arbitrary file upload exploit for a W
CRPx0 ransomware operation and affiliate service overview
Cybercrime

August 26, 2026

CRPx0 - Threat Actor ProfileCRPx0 is a rapidly expanding ransomware operation combining data theft, cryptocurrency theft, file encryption, and RaaS, with KELA linking the operation to the cybercriminal persona “MrAnon00”.
Banner for KELA's blog on Exilio404, a Portuguese-language dark web forum hosting carding, money mule and malware activity targeting Brazil.
Cybercrime

July 19, 2026

Inside Exilio404: Brazil's Underground Cybercrime SceneExilio404 is a Portuguese-language dark web forum that emerged in May 2025 and now hosts thousands of posts on carding, phishing, malware and money mule operations targeting Brazil. This blog examines
Image of a hand holding money with a snake wrapped around the arm to show a digital version that's turned them into a money mule
Cybercrime

June 26, 2026

Exposing the Underground Mule-as-a-Service Economy: How AI and Telegram Are Reshaping Money LaunderingA defenders guide to the MaaS economy that industrializes money laundering
The BreachForums Succession Wars
Cybercrime

June 22, 2026

The BreachForums Succession WarsKELA maps the fragmentation of BreachForums after the October 2025 FBI seizure into three rival successors — PWN, Breached, and HasanBroker's DoxByte — and explains why the most active heir now operat
2026 FIFA World Cup Cyber Threat Landscape
Cybercrime

June 14, 2026

Securing the Pitch for 6 Billion People: How Previous Games Shaped the 2026 FIFA World Cup Cyber Threat Landscape State-sponsored APTs, industrial-scale ticket fraud, and 1.5M+ leaked credentials: KELA's CIC breaks down the cyber threats facing the 2026 FIFA World Cup—and how to defend
3 Minute Attribution of the ANTS Breach: Tracing “breach3d” Using KELA Intelligence and OSINT
Cybercrime

May 14, 2026

3 Minute Attribution of the ANTS Breach: Tracing “breach3d” Using KELA Intelligence and OSINT 3 Minute Attribution of the ANTS Breach: How KELA analysts attributed the ANTS breach — affecting ~12M French records — to a real-world individual in minutes, using threat intel and OSINT.
The Handala Hack: Telegram Breach of Israeli Officials
Cybercrime

January 1, 2026

The Handala Hack: Telegram Breach of Israeli OfficialsHandala targeted Israeli officials by compromising Telegram accounts - not devices - likely through session hijacking and social engineering . The incident exposes critical vulnerabilities in session