ZeroFox

ZeroFox Threat Intelligence is back with the latest edition of the Underground Economist.
This issue covers:

🗂️ ShinyHunters allegedly disclosing nearly one million DarkForums user records after exploiting a myBB vulnerability
🏢 Publicly exposed building access control systems reportedly accessible through default credentials
🤖 A new AI-based hacking tool advertised as an all-in-one platform for fraud, malware development, and intrusion support
🔐 A new version of the ShadowByt3$ ransomware-as-a-service platform with upgraded evasion and persistence features

Get the latest from the deep and dark web in the the Underground Economist: https://ow.ly/jP5250YW7PI

Ransomware activity did not cool off in Q1. It stayed near record highs.

ZeroFox observed at least 2,059 ransomware and digital extortion incidents in Q1 2026, with March alone accounting for 747 incidents. Manufacturing remained the most targeted industry, and North America continued to face the highest concentration of attacks.

Our latest Q1 Ransomware Wrap Up breaks down the regional trends, top targeted sectors, and the most active collectives shaping the ransomware landscape.

Read the full wrap up: https://ow.ly/K6B650YNCip

We’ve expanded our partnership with e92plus to bring external threat protection to their network of MSSP partners across the UK, Ireland, and Benelux.

Most managed security programs are built around the internal network. That leaves a growing gap: Brand fraud, impersonation attacks, phishing infrastructure, and executive targeting that traditional tools don't reach.

Through this partnership, e92plus partners can now add fully managed external threat protection to their stack, without complexity.

Read the full announcement: https://ow.ly/YgQe50YMQrA