[equation-group]

July 30, 2026

• Operation Triangulation research ties the OBTUSE iOS spyware to the US-linked Equation Group. Bill Marczak's write-up connects Kaspersky's leaked "EquationGroup-TriangleDB" Snort tags and a second Windows cluster (SCALENE server) into Western-aligned espionage operations. Marczak (Medium) · Threat Activity

in OpenAI's Rogue Agent Widens: Four More Companies Caught in the Blast Radius

July 19, 2026

• Unit 42 flags an Equation Group-style implant in the wild, initially resembling a known NSA TAO sample by reusing an exported function name — worth watching as analysis develops (via @0xpwnie). · Threat Activity

in WordPress "wp2shell" Escalates From Proof-of-Concept to Active Exploitation