• United Kingdom
• Critical Infrastructures
• Zoldyck
• Edf Energy
• Europe

Threat Actor Claims Breach of UK-based EDF Energy

In June 2025, a threat actor named Zoldyck claimed to have breached EDF Energy Company and to have gained access to its database. According to the threat actor, over 12 million lines of data belonging to EDF's customers were taken, including sensitive information such as customer IDs, full names, dates of birth, national IDs, addresses, email addresses, phone numbers, and payment details.

• Tetraloader
• United States
• Business Services
• Cve-2025-0944
• Uat-6382
• Government
• North America
• CVE-2025-0944
• Trimble
• Critical Infrastructures

Chinese Threat Actor UAT-6382 Exploits Vulnerability in Trimble Cityworks

A Chinese-speaking threat actor known as UAT-6382 has been linked to the exploitation of a recently patched remote-code-execution vulnerability (CVE-2025-0944) in Trimble Cityworks. This group successfully targeted enterprise networks of local governing bodies in the United States, deploying various web shells and custom malware, including Cobalt Strike and a Rust-based loader called Tetraloader, to maintain long-term access to compromised systems. The attacks began in January 2025, and the vulnerability was added to the U.S. Cybersecurity and Infrastructure Security Agency's known exploited vulnerabilities catalog in February 2025.