Threat Intelligence
Latest Threat Reports
CyberAlberta transforms complex cyber data into clear, actionable intelligence. The reports below reflect active campaigns and high-priority vulnerabilities relevant to Alberta organizations.
2026-08-27
CAA-2026-0023 ClickFix Lures Hosted on Blockchain Lead to NetSupport RAT
Since May 2026, CyberAlberta Threat Intelligence observed several ClearFake-compromised websites retrieve ClickFix phishing lures hosted on blockchain networks. On 30 July 2026, a related multi-stage ClickFix campaign wa
2026-04-20
CAA-2026-0018 Device Code Phishing Attacks Abuse Legitimate Authentication Methods to Bypass MFA
Since 25 March 2026, CyberAlberta Threat intelligence observed phishing attacks targeting the OAuth Device Code authentication method. This authentication method was created for input-constrained devices but has been inc
2026-03-26
CAA-2026-0015 TeamPCP Supply Chain Attack Distributes Information Stealer via Trusted Dependencies
A threat actor known as TeamPCP has conducted multiple supply chain attacks targeting popular open-source security scanners, resulting in the distribution of malicious updates containing information stealer malware. This
2026-03-13
CAA-2026-0012 Cyber Preparedness for Alberta Organizations Amid Iran-Linked Threats
Preparedness guidance for elevated geopolitical cyber risk and sector-specific defensive actions.
Operations
How We Monitor
Cyber threats are constantly evolving, and so is CyberAlberta's response. Our intelligence team monitors active campaigns, analyzes attacker behaviour, and publishes guidance tailored to Alberta's threat environment.
Our work focuses on understanding threat actor motivations, methods, and exploited vulnerabilities - then translating that analysis into practical recommendations organizations can implement quickly.
Through coordinated information sharing across sectors and jurisdictions, we help Alberta organizations stay informed, prepared, and resilient against emerging digital risk.
Take Action
