DarkCasino

Reports per quarter

CVEs named in reports

• CVE-2023-36025 KEV
• CVE-2023-38831 KEV ransomware
• CVE-2024-21412 KEV ransomware

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 6 April 2026

   CVE-2023-38831 zero-Day vulnerability in WinRAR | Group-IB Blog

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor CVE-2023-38831 zero-Day vulnerability in WinRAR | Group-IB Blog

2. 6 April 2026

   Operation DarkCasino: In-Depth Analysis of Attacks by APT Group Evilnum (Part 2) - NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks.

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor Operation DarkCasino: In-Depth Analysis of Attacks by APT Group Evilnum (Part 2) - NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks.

3. 6 April 2026

   Operation DarkCasino: In-Depth Analysis of Attacks by APT Group Evilnum (Part 1) - NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks.

   date ORKL added it fromORKL

   Archived copy on ORKL Detailsfor Operation DarkCasino: In-Depth Analysis of Attacks by APT Group Evilnum (Part 1) - NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks.

4. 28 December 2024

   Lumma 2024: Dominating the Info-Stealer Market

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Lumma 2024: Dominating the Info-Stealer Market

5. 23 July 2024

   Exploiting CVE-2024-21412: A Stealer Campaign Unleashed | FortiGuard Labs

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Exploiting CVE-2024-21412: A Stealer Campaign Unleashed | FortiGuard Labs

6. 13 March 2024

   CVE-2024-21412: DarkGate Operators Exploit Microsoft Windows SmartScreen Bypass in Zero-Day Campaign

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor CVE-2024-21412: DarkGate Operators Exploit Microsoft Windows SmartScreen Bypass in Zero-Day Campaign

7. 16 February 2024

   CVE-2024-21412_ Water Hydra Targets Traders with Microsoft Defender SmartScreen Zero-Day

   file creation date fromORKL

   The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor CVE-2024-21412_ Water Hydra Targets Traders with Microsoft Defender SmartScreen Zero-Day

8. 13 February 2024

   CVE-2024-21412: Water Hydra Targets Traders with Microsoft Defender SmartScreen Zero-Day

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor CVE-2024-21412: Water Hydra Targets Traders with Microsoft Defender SmartScreen Zero-Day

9. 10 November 2023

   The New APT Group DarkCasino and the Global Surge in WinRAR 0-Day Exploits - NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks.

   Malpedia library date NSFOCUS fromORKLCCS '25 data

   Archived copy on ORKL Detailsfor The New APT Group DarkCasino and the Global Surge in WinRAR 0-Day Exploits - NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks.

10. 30 May 2022

    Operation DarkCasino- In-Depth Analysis of Recent Attacks by APT Group EVILNUM

    date in the title fromORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Operation DarkCasino- In-Depth Analysis of Recent Attacks by APT Group EVILNUM

Newest first. Details opens the report in Explore.