The sights and sounds from the Talos Threat Research Summit
Summary: Ransomware incidents in Japan reached 134 in 2025, a 17.5% year-over-year increase, with The Gentlemen the most active group and its leak-site listings more than doubling from January to July. Qilin ranked second and appeared to use AI, small and medium enterprises with capital under JPY 1 billion made up 80% of victims, and the Chaos group's new "msaRAT" malware hijacks browsers to run commands while hiding the attacker's IP via WebRTC over TURN.
Why it matters: Four out of five victims were SMEs with capital under JPY 1 billion, and msaRAT's browser-based channel means the traffic reaching command infrastructure looks like ordinary web use rather than a direct connection to a command server.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026