https://aftrdrk.com/aftrmathThreat intelligence analysis from AFTRDRK.https://aftrdrk.com/aftrmath/silent-ransom-group-human-enabled-operationshttps://aftrdrk.com/aftrmath/silent-ransom-group-human-enabled-operationsThu, 15 Oct 2026 12:00:00 +0000ExtortionSilent Ransom Group pairs callback phishing with people on the ground, cultivated insiders and plans that reach well past data extortion.https://aftrdrk.com/aftrmath/the-handala-hindsight-how-three-years-of-warning-signs-led-to-the-stryker-wipehttps://aftrdrk.com/aftrmath/the-handala-hindsight-how-three-years-of-warning-signs-led-to-the-stryker-wipeFri, 03 Apr 2026 12:00:00 +0000AttributionThe Iran-linked persona Handala wiped Stryker's devices through Microsoft Intune in March 2026. Three years of operations in Israel showed it coming.https://aftrdrk.com/aftrmath/scraping-the-darknethttps://aftrdrk.com/aftrmath/scraping-the-darknetMon, 02 Mar 2026 12:00:00 +0000CollectionThe structure and defenses of underground forums where stolen data is traded and access is sold, and what it takes to collect from them at scale.https://aftrdrk.com/aftrmath/us-treasury-sanctions-russian-zero-day-brokerhttps://aftrdrk.com/aftrmath/us-treasury-sanctions-russian-zero-day-brokerMon, 02 Mar 2026 12:00:00 +0000SanctionsOn February 24, 2026, the U.S. issued the first sanctions under PAIPA, against Russian exploit broker Operation Zero and its affiliates.