APT

Winnti uses a new PipeMon backdoor in attacks aimed at the gaming industryWinnti uses a new PipeMon backdoor in attacks aimed at the gaming industry

Winnti uses a new PipeMon backdoor in attacks aimed at the gaming industry

The Winnti hacking group continues to target gaming industry, recently it used a new malware named PipeMon and a new method…

5 years ago
Iran-linked Chafer APT group targets governments in Kuwait and Saudi ArabiaIran-linked Chafer APT group targets governments in Kuwait and Saudi Arabia

Iran-linked Chafer APT group targets governments in Kuwait and Saudi Arabia

Cybersecurity researchers uncovered an Iranian cyber espionage campaign conducted by Chafer APT and aimed at critical infrastructures in Kuwait and…

5 years ago
APT group targets high profile networks in Central AsiaAPT group targets high profile networks in Central Asia

APT group targets high profile networks in Central Asia

Security firms have foiled an advanced cyber espionage campaign carried out by Chinese APT and aimed at infiltrating a governmental…

5 years ago
Chinese APT Tropic Trooper target air-gapped military Networks in AsiaChinese APT Tropic Trooper target air-gapped military Networks in Asia

Chinese APT Tropic Trooper target air-gapped military Networks in Asia

Chinese threat actors, tracked as Tropic Trooper and KeyBoy, has been targeting air-gapped military networks in Taiwan and the Philippines. Chinese…

5 years ago
Russian APT Turla’s COMpfun malware uses HTTP status codes to receive commandsRussian APT Turla’s COMpfun malware uses HTTP status codes to receive commands

Russian APT Turla’s COMpfun malware uses HTTP status codes to receive commands

Russia-linked cyberespionage group Turla targets diplomatic entities in Europe with a new piece of malware tracked as COMpfun. Security experts…

5 years ago
USCYBERCOM shares five new North Korea-linked malware samplesUSCYBERCOM shares five new North Korea-linked malware samples

USCYBERCOM shares five new North Korea-linked malware samples

The United States Cyber Command (USCYBERCOM) has uploaded five new North Korean malware samples to VirusTotal. The United States Cyber…

5 years ago
North Korea-linked Lazarus APT uses a Mac variant of the Dacls RATNorth Korea-linked Lazarus APT uses a Mac variant of the Dacls RAT

North Korea-linked Lazarus APT uses a Mac variant of the Dacls RAT

North Korea-linked Lazarus APT group employed a Mac variant of the Dacls Remote Access Trojan (RAT) in recent attacks. North…

5 years ago
Naikon APT is flying under the radar since 2015Naikon APT is flying under the radar since 2015

Naikon APT is flying under the radar since 2015

Chinese-speaking Naikon APT group leverages a new backdoor called Aria-body to target organizations in South Asia and Australia. The Naikon…

5 years ago
PhantomLance, a four-year-long cyberespionage spying campaignPhantomLance, a four-year-long cyberespionage spying campaign

PhantomLance, a four-year-long cyberespionage spying campaign

Kaspersky Lab uncovered an ongoing cyberespionage campaign, dubbed PhantomLance, that employed malicious apps hosted on the official Google Play. Kaspersky…

5 years ago
Expert identifies new Nazar APT group referenced in 2017 Shadow Brokers leakExpert identifies new Nazar APT group referenced in 2017 Shadow Brokers leak

Expert identifies new Nazar APT group referenced in 2017 Shadow Brokers leak

A security expert uncovered an old APT operation, tracked Nazar, by analyzing the NSA hacking tools included in the dump…

5 years ago