• Critical Infrastructures
• Edf Energy
• United Kingdom
• Europe
• Zoldyck

Threat Actor Claims Breach of UK-based EDF Energy

In June 2025, a threat actor named Zoldyck claimed to have breached EDF Energy Company and to have gained access to its database. According to the threat actor, over 12 million lines of data belonging to EDF's customers were taken, including sensitive information such as customer IDs, full names, dates of birth, national IDs, addresses, email addresses, phone numbers, and payment details.

• Uat-6382
• Critical Infrastructures
• Trimble
• North America
• Tetraloader
• Business Services
• Government
• CVE-2025-0944
• Cve-2025-0944
• United States

Chinese Threat Actor UAT-6382 Exploits Vulnerability in Trimble Cityworks

A Chinese-speaking threat actor known as UAT-6382 has been linked to the exploitation of a recently patched remote-code-execution vulnerability (CVE-2025-0944) in Trimble Cityworks. This group successfully targeted enterprise networks of local governing bodies in the United States, deploying various web shells and custom malware, including Cobalt Strike and a Rust-based loader called Tetraloader, to maintain long-term access to compromised systems. The attacks began in January 2025, and the vulnerability was added to the U.S. Cybersecurity and Infrastructure Security Agency's known exploited vulnerabilities catalog in February 2025.