NEW: Group Profiler — instant APT intel lookup. Try it →

Retail — threat intelligence

Recent advisories whose title or summary heuristically matches the Retail sector. Derived in-browser/at-edge from a keyword catalog — treat tags as a hint and open each source for ground truth. The underlying feed updates hourly; this page is a snapshot from its last build (timestamped below).

4 recent Retail advisories

Snapshot built . The live filter and the RSS feed reflect new items as they arrive.

  1. INFO securityweek ·

    AI-Powered Campaign Targets Hundreds of Online Retailers

    A threat actor is using three AI harnesses for vulnerability research, exploitation, and attack orchestration. The post AI-Powered Campaign Targets Hundreds of Online Retailers appeared first on SecurityWeek.

  2. INFO schneier ·

    Research on Models Engaging in Genie-Like Behavior

    New paper: “Self-Jailbreaking: Language Models Can Reason Themselves Out of Safety Alignment After Benign Reasoning Training.” Abstract: We discover a novel and surprising phenomenon of unintentional misalignment in reasoning language model…

  3. INFO the-record ·

    Russian e-commerce giant Wildberries says DDoS attack delayed payments to sellers

    Wildberries told several Russian media outlets earlier this week that payments to some sellers were delayed by security measures introduced after a distributed denial-of-service (DDoS) attack targeted systems used to track and withdraw thei…

    RU
  4. INFO malwarebytes-labs ·

    More than 100,000 fake stores are out to steal your card details

    DoppelCart’s fake stores copy real retailers and steal shoppers’ card details and one-time bank confirmation codes.

Other sectors: Government ·Healthcare ·Finance ·Energy ·Critical Infra ·Education ·Technology ·Telecom ·Defense ·Transportation ·Legal Services

Threat groups reported to target Retail

MITRE ATT&CK records 4 tracked groups with reported targeting of this sector. Each links to its ATT&CK profile: techniques by tactic, aliases, tooling and the groups closest to it by technique overlap. Reported targeting is not attribution of any specific advisory above.

APT41 ·FIN8 ·TA505 ·Winnti Group

Also on ThreatFilter: cross-source corroborated CVEs · threat group directory · every source we track