← threat actors
malware and tools
- obtuse 1 · Jul 30
- scalene 1 · Jul 30
techniques
- espionage 1 · Jul 30
- spyware 1 · Jul 30
what we reported, newest first, grouped by story
July 30, 2026
- Operation Triangulation research ties the OBTUSE iOS spyware to the US-linked Equation Group. Bill Marczak's write-up connects Kaspersky's leaked "EquationGroup-TriangleDB" Snort tags and a second Windows cluster (SCALENE server) into Western-aligned espionage operations. Marczak (Medium)
· Jul 30 · observed · Threat Activity
July 19, 2026
- Unit 42 flags an Equation Group-style implant in the wild, initially resembling a known NSA TAO sample by reusing an exported function name — worth watching as analysis develops (via @0xpwnie).
· Jul 19 · observed · Threat Activity