APT

HPE is notifying individuals affected by a December 2023 attackHPE is notifying individuals affected by a December 2023 attack

HPE is notifying individuals affected by a December 2023 attack

Hewlett Packard Enterprise (HPE) has begun notifying individuals affected by a December 2023 attack carried out by Russia-linked threat actors.…

3 months ago
Kimsuky APT group used custom RDP Wrapper version and forceCopy stealerKimsuky APT group used custom RDP Wrapper version and forceCopy stealer

Kimsuky APT group used custom RDP Wrapper version and forceCopy stealer

Researchers spotted North Korea's Kimsuky APT group launching spear-phishing attacks to deliver forceCopy info-stealer malware. Researchers from AhnLab Security Intelligence…

3 months ago
Lazarus APT targets crypto wallets using cross-platform JavaScript stealerLazarus APT targets crypto wallets using cross-platform JavaScript stealer

Lazarus APT targets crypto wallets using cross-platform JavaScript stealer

The North Korea-linked APT group Lazarus uses a cross-platform JavaScript stealer to target crypto wallets in a new hacking campaign.…

4 months ago
GamaCopy targets Russia mimicking Russia-linked Gamaredon APTGamaCopy targets Russia mimicking Russia-linked Gamaredon APT

GamaCopy targets Russia mimicking Russia-linked Gamaredon APT

New threat actor GamaCopy mimics Russia-linked Gamaredon APT in attacks on Russian-speaking targets. The Knownsec 404 Advanced Threat Intelligence team…

4 months ago
Esperts found new DoNot Team APT group’s Android malwareEsperts found new DoNot Team APT group’s Android malware

Esperts found new DoNot Team APT group’s Android malware

Researchers linked the threat actor DoNot Team to a new Android malware that was employed in highly targeted cyber attacks. CYFIRMA…

4 months ago
U.S. Treasury Sanctions Chinese cybersecurity firm and actor over federal agency breach tied to Salt TyphoonU.S. Treasury Sanctions Chinese cybersecurity firm and actor over federal agency breach tied to Salt Typhoon

U.S. Treasury Sanctions Chinese cybersecurity firm and actor over federal agency breach tied to Salt Typhoon

The U.S. Treasury's OFAC sanctioned a Chinese cybersecurity firm and a Shanghai cyber actor for ties to Salt Typhoon and…

4 months ago
Russia-linked APT Star Blizzard targets WhatsApp accountsRussia-linked APT Star Blizzard targets WhatsApp accounts

Russia-linked APT Star Blizzard targets WhatsApp accounts

The Russian group Star Blizzard targets WhatsApp accounts in a new spear-phishing campaign, shifting tactics to avoid detection. In November…

4 months ago
Russia-linked APT UAC-0063 target Kazakhstan in with HATVIBE malwareRussia-linked APT UAC-0063 target Kazakhstan in with HATVIBE malware

Russia-linked APT UAC-0063 target Kazakhstan in with HATVIBE malware

Russia-linked threat actor UAC-0063 targets Kazakhstan to gather economic and political intelligence in Central Asia. Russia-linked threat actors UAC-0063 is…

4 months ago
China-linked APT group MirrorFace targets JapanChina-linked APT group MirrorFace targets Japan

China-linked APT group MirrorFace targets Japan

Japanese authorities attributed a cyber-espionage campaign targeting the country to the China-linked APT group MirrorFace. The National Police Agency (NPA)…

4 months ago
China-linked Salt Typhoon APT compromised more US telecoms than previously knownChina-linked Salt Typhoon APT compromised more US telecoms than previously known

China-linked Salt Typhoon APT compromised more US telecoms than previously known

China-linked Salt Typhoon group that breached multiple US telecoms compromised more firms than previously known, WSJ says. The China-linked cyberespionage…

5 months ago