Skip to content
SparTech Software SparTech Software

Your Protection, Our Mission since 1987

  • Services
    • Service Offerings
    • Security Services Request
  • News
    • Cybersecurity News
    • CyberPulse Updates
  • Knowledge
    • AI/Machine Learning
    • Cybersecurity Defense
    • Encryption
    • Reconnaissance
    • Scanning and Analysis
    • Exploitation
  • Resources
    • 3rd Party News Feeds
    • Analysis
    • Cheat Sheets and Checklists
    • Glossary
    • Honeypot Stats (updated hourly)
    • Labs and Lessons
    • PawnPad Pentest Studio
    • Ransomware Live Feed
    • References
  • Facebook
  • Bluesky
  • Instagram
  • Pinterest
  • Threads
  • LinkedIn
  • Twitter
Requests

Gold Blade

Home - Gold Blade

Sophos Investigates Evolving GOLD BLADE “RedLoader” Attack Chain
Posted inCybersecurity News

Sophos Investigates Evolving GOLD BLADE “RedLoader” Attack Chain

Cybersecurity researchers at Sophos are closely tracking a sophisticated new infection chain developed by the financially motivated cybercriminal group known as GOLD BLADE, also referred to in the threat landscape as RedCurl, Red Wolf, and Earth Kapre. GOLD BLADE has a known history of orchestrating commercial espionage campaigns since at least 2018.
Posted by Spartech Software July 29, 2025

Latest Posts

  • XCPE Android Botnet Disrupted, 1.3M TV Boxes Exposed
  • Google Cloud Launches $250,000 Root-in-Cloud Bounty
  • Polymarket Refunds $3.9M After DebugBear DNS Hijack
  • Binance Hack: FBI Names North Korea, Flags 628 Wallets
  • Anthropic Phishing Emails Evade Proofpoint, Microsoft

Ransomware Live

  • 🏴‍☠️ Qilin has just published a new victim : Isapre Consalud
  • 🏴‍☠️ Settra has just published a new victim : kingdomtitle.net
  • 🏴‍☠️ Settra has just published a new victim : mackinengineering.com
  • 🏴‍☠️ Settra has just published a new victim : insurancehouse.com
  • 🏴‍☠️ Orova has just published a new victim : Harry's International
  • 🏴‍☠️ Everstake has just published a new victim : da*****t.com
  • 🏴‍☠️ Everstake has just published a new victim : ra*****g.com
  • 🏴‍☠️ Redact has just published a new victim : Holland & Knight
  • 🏴‍☠️ Qilin has just published a new victim : Astino Berhad
  • 🏴‍☠️ Akira has just published a new victim : Princeton Management

Threat Level

High

Attack Statistics

United States ~59% of ransomware attacks globally
Thousands per year
Poland 1,000+ per week
Russia Highest cybercrime threat level
China Thousands per year
India 115% surge in attacks Q2 2024
Ukraine Significant surge since 2022
Brazil Among top countries for blocked attacks
Mexico 65% of businesses hit in 2024
Germany High targeted rate (EU)
France High targeted rate (EU)

Top attacking AS/N

AS NameASN
Bharat Sanchar Nigam Ltd9829
No.31,Jin-rong Street4134
CHINA UNICOM China169 Backbone4837
DigitalOcean, LLC14061
HUAWEI INTERNATIONAL PTE. LTD.136907
Amazon.com, Inc.14618
Alibaba (US) Technology Co., Ltd.45102
Google LLC396982
Amazon.com, Inc.16509
3xK Tech GmbH200373

Top attacking IP addresses

IP AddressNotable Exploits/Context
104.238.159.149SharePoint zero-day, broad exploitation
107.191.58.76SharePoint zero-day, government targets
96.9.125.147SharePoint, previously Ivanti exploits
139.162.47.194Exploits on CitrixBleed 2
38.180.148.215CitrixBleed 2 campaigns
185.224.128.17High activity, Netherlands
89.248.163.200High activity, Netherlands
15.235.218.150Associated with APT, active C2
45.9.148.114Associated with C2, malicious netflow
91.107.150.184C2 infrastructure, recent IoC

Visit our Friends

  • Bible Blender
  • Geek Slop
  • Pick Pony
  • Pick Playbook

About SparTech Software

  • Read about SparTech Software's cybersecurity services
  • Cybersecurity services request
  • Privacy Policy

Social Media

  • Facebook
  • Bluesky
  • Instagram
  • Pinterest
  • Threads
  • LinkedIn
  • Twitter

Contact Us

2345 Charles Ave
Burleson, TX 76028
Contact Us Form

Copyright 2026 — SparTech Software. All rights reserved.
Scroll to Top
×