Threat Intel Content Update: 6/24/2025

Threat Content Highlights

Analysis

Published a brief analysis to help teams looking to make sense of the current hostilities in the Middle East and their implications for cybersecurity.
- - Defenders should keep in mind that adversarial cyber responses likely remain an option even as attempts are made to halt the physical conflict.

Threat Objects, Tags, & Profiles

- - “Trending & Emerging Threats” weekly update: Threats Abusing AI
    - We’ve once again updated our Threat Profile that spotlights adversaries known to leverage AI to support their operations (as opposed to adversaries attacking AI systems), following new reports that highlighted additional threats, including APT5, Ke3chang, and Magic Hound.
    - AI is especially being leveraged to bolster recon & initial access activity; this Profile is especially helpful for assessing coverage around the myriad other TTPs (e.g. post-exploit behaviors) associated with these threats.

Threat Objects

Anubis: New Group & Software around a new ransomware group that features file-wiping capabilities as part of its arsenal.
Predatory Sparrow: New Group that appears to target Iran-based entities, most recently the country’s largest cryptocurrency exchange.