Threat Intel Content Update: 2/25/25

Threat Profiles & Objects

• “Trending & Emerging Threats” weekly update: Criminal Threats Linked to Nation-States
  • Google Threat Intelligence Group researchers recently published numerous real-world examples of cybercriminal relationships with nation-state threats. This Threat Profile collects the main Tidal knowledge base objects related to threats referenced in the report – most of which have been recently updated or added within our platform:

• The report highlights cases where criminally oriented software (e.g. malware-as-a-service) has been leveraged by nation-state actors, where cybercrime groups evolved their motivations, and where state-backed entities outsourced operations to financially motivated actors. Links to nation-state adversaries could increase the priority level for relevant software & groups, and users can leverage this Threat Profile to quickly assess defensive coverage across all these recently identified threats at once.
  
  
• New Group and several new Software added to Tidal Cyber Enterprise & Community Editions from CISA’s latest advisory on Ghost, a China-based ransomware operation.