APT

Kimsuky APT exploited BlueKeep RDP flaw in attacks against South Korea and JapanKimsuky APT exploited BlueKeep RDP flaw in attacks against South Korea and Japan

Kimsuky APT exploited BlueKeep RDP flaw in attacks against South Korea and Japan

Researchers spotted a new North Korea-linked group Kimsuky 's campaign, exploiting a patched Microsoft Remote Desktop Services flaw to gain…

1 month ago
Russia-linked APT29 targets European diplomatic entities with GRAPELOADER malwareRussia-linked APT29 targets European diplomatic entities with GRAPELOADER malware

Russia-linked APT29 targets European diplomatic entities with GRAPELOADER malware

Russia-linked group APT29 targeted diplomatic entities across Europe with a new malware loader codenamed GRAPELOADER. Check Point Research team reported…

1 month ago
China-linked APT Mustang Panda upgrades tools in its arsenalChina-linked APT Mustang Panda upgrades tools in its arsenal

China-linked APT Mustang Panda upgrades tools in its arsenal

China-linked APT group Mustang Panda deployed a new custom backdoor, MQsTTang, in recent attacks targeting Europe, Asia, and Australia. China-linked…

1 month ago
China admitted its role in Volt Typhoon cyberattacks on U.S. infrastructure<gwmw style="display:none;"></gwmw><gwmw style="display:none;"></gwmw>China admitted its role in Volt Typhoon cyberattacks on U.S. infrastructure<gwmw style="display:none;"></gwmw><gwmw style="display:none;"></gwmw>

China admitted its role in Volt Typhoon cyberattacks on U.S. infrastructure<gwmw style="display:none;"></gwmw><gwmw style="display:none;"></gwmw>

China admitted in a secret meeting with U.S. officials that it conducted Volt Typhoon cyberattacks on U.S. infrastructure, WSJ reports.…

1 month ago
Gamaredon targeted the military mission of a Western country based in UkraineGamaredon targeted the military mission of a Western country based in Ukraine

Gamaredon targeted the military mission of a Western country based in Ukraine

Gamaredon targeted a foreign military mission in Ukraine with updated GammaSteel malware on Feb 26, 2025, per Symantec. Symantec Threat…

1 month ago
An APT group exploited ESET flaw to execute malware<gwmw style="display:none;"></gwmw>An APT group exploited ESET flaw to execute malware<gwmw style="display:none;"></gwmw>

An APT group exploited ESET flaw to execute malware<gwmw style="display:none;"></gwmw>

At least one APT group has exploited a vulnerability in ESET software to stealthily execute malware, bypassing security measures. Kaspersky…

1 month ago
China-linked group UNC5221 exploited Ivanti Connect Secure zero-day since mid-MarchChina-linked group UNC5221 exploited Ivanti Connect Secure zero-day since mid-March

China-linked group UNC5221 exploited Ivanti Connect Secure zero-day since mid-March

Ivanti addressed a critical remote code execution flaw in Connect Secure, which has been exploited since at least mid-March 2025.…

2 months ago
Chinese APT Weaver Ant infiltrated a telco in Asia for over four yearsChinese APT Weaver Ant infiltrated a telco in Asia for over four years

Chinese APT Weaver Ant infiltrated a telco in Asia for over four years

China-linked APT Weaver Ant infiltrated the network of a telecommunications services provider for over four years.  The China-linked threat actor…

2 months ago
UAT-5918 ATP group targets critical TaiwanUAT-5918 ATP group targets critical Taiwan

UAT-5918 ATP group targets critical Taiwan

Cisco Talos found UAT-5918, active since 2023, using web shells and open-source tools for persistence, info theft, and credential harvesting.…

2 months ago
U.S. Treasury removed sanctions against the crypto mixer service Tornado Cash<gwmw style="display: none; background-color: transparent;"></gwmw>U.S. Treasury removed sanctions against the crypto mixer service Tornado Cash<gwmw style="display: none; background-color: transparent;"></gwmw>

U.S. Treasury removed sanctions against the crypto mixer service Tornado Cash<gwmw style="display: none; background-color: transparent;"></gwmw>

The U.S. Treasury is lifting sanctions on Tornado Cash, a crypto mixer accused of helping North Korea's Lazarus Group launder…

2 months ago