Hive0163

No known aliases in database

⚠ Critical Threat

Slopoly/Interlock Ransomware Campaign, Cisco FMC Zero-Day Exploitation

Origin —

Motivation Financial extortion through large-scale data exfiltration and ransomware encryption.

Target Sectors

Healthcare Education Government Critical Infrastructure Financial Services

Social Engineering (ClickFix)

Exploitation of Public-Facing Applications (e.g., CVE-2026-20131)

AI-Assisted Malware Development (Slopoly)

PowerShell-based Persistence (Scheduled Tasks)

Remote Access Trojans (NodeSnake, Interlock RAT)

Credential Theft (LSASS dumping)

Data Exfiltration

Double Extortion

Defense Evasion (EDR/AV suppression)

CISA Advisories ↗

Hacking the mainframe…