Threat Intelligence Brief
Curated summary with source attribution
Source: socradar.io
Threat Risk: Medium
Victim: hoerburger (Retail & E-Commerce)
Incident: Alleged ransomware attack and data breach.
Impact: Potential unauthorized access to corporate networks and theft of sensitive organizational data.
Attacker: ZaWoo ransomware group
Analysis: The ZaWoo group has claimed unauthorized access to hoerburger, aligning with their known geographic focus on Germany. Analysis of infostealer telemetry revealed exposed ADFS/STS credentials dating back several months, which likely provided the initial access vector for the attack.
Recommendations: Immediately rotate all ADFS/STS and corporate credentials.; Enforce strict multi-factor authentication (MFA) for all remote-access portals.; Audit authentication logs from November 2025 onwards to identify unauthorized access.
Source: SOCRadar
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source