APT

Russia’s Secret Blizzard APT targets Ukraine with Kazuar backdoorRussia’s Secret Blizzard APT targets Ukraine with Kazuar backdoor

Russia’s Secret Blizzard APT targets Ukraine with Kazuar backdoor

Russia-linked APT group Secret Blizzard is using Amadey Malware-as-a-Service to infect systems in Ukraine with the Kazuar backdoor. The Russia-linked APT…

6 months ago
China-linked APT Gelsemium uses a new Linux backdoor dubbed WolfsBaneChina-linked APT Gelsemium uses a new Linux backdoor dubbed WolfsBane

China-linked APT Gelsemium uses a new Linux backdoor dubbed WolfsBane

China-linked APT Gelsemium has been observed using a new Linux backdoor dubbed WolfsBane in attacks targeting East and Southeast Asia. China-linked…

7 months ago
DPRK-linked BlueNoroff used macOS malware with novel persistenceDPRK-linked BlueNoroff used macOS malware with novel persistence

DPRK-linked BlueNoroff used macOS malware with novel persistence

SentinelLabs observed North Korea-linked threat actor BlueNoroff targeting businesses in the crypto industry with a new multi-stage malware. SentinelLabs researchers identified…

8 months ago
Russia-linked Midnight Blizzard APT targeted 100+ organizations with a spear-phishing campaign using RDP filesRussia-linked Midnight Blizzard APT targeted 100+ organizations with a spear-phishing campaign using RDP files

Russia-linked Midnight Blizzard APT targeted 100+ organizations with a spear-phishing campaign using RDP files

Microsoft warns of a new phishing campaign by Russia-linked APT Midnight Blizzard targeting hundreds of organizations. Microsoft warns of a…

8 months ago
North Korea-linked APT37 exploited IE zero-day in a recent attackNorth Korea-linked APT37 exploited IE zero-day in a recent attack

North Korea-linked APT37 exploited IE zero-day in a recent attack

North Korea-linked group APT37 exploited an Internet Explorer zero-day vulnerability in a supply chain attack. A North Korea-linked threat actor,…

8 months ago
Russia-linked RomCom group targeted Ukrainian government agencies since late 2023Russia-linked RomCom group targeted Ukrainian government agencies since late 2023

Russia-linked RomCom group targeted Ukrainian government agencies since late 2023

Russia-linked threat actor RomCom targeted Ukrainian government agencies and Polish entities in cyber attacks since late 2023. Cisco Talos researchers…

8 months ago
China-linked group Salt Typhoon hacked US broadband providers and breached wiretap systemsChina-linked group Salt Typhoon hacked US broadband providers and breached wiretap systems

China-linked group Salt Typhoon hacked US broadband providers and breached wiretap systems

China-linked APT group Salt Typhoon breached U.S. broadband providers, potentially accessing systems for lawful wiretapping and other data. China-linked APT…

9 months ago
Microsoft and DOJ seized the attack infrastructure used by Russia-linked Callisto GroupMicrosoft and DOJ seized the attack infrastructure used by Russia-linked Callisto Group

Microsoft and DOJ seized the attack infrastructure used by Russia-linked Callisto Group

Microsoft and the U.S. DoJ seized over 100 domains used by the Russia-linked Callisto Group for launching attacks on U.S.…

9 months ago
China-linked APT group Salt Typhoon compromised some U.S. internet service providers (ISPs)China-linked APT group Salt Typhoon compromised some U.S. internet service providers (ISPs)

China-linked APT group Salt Typhoon compromised some U.S. internet service providers (ISPs)

China-linked threat actors compromised some U.S. internet service providers (ISPs) as part of a cyber espionage campaign code-named Salt Typhoon.…

9 months ago
North Korea-linked APT Gleaming Pisces deliver new PondRAT backdoor via malicious Python packagesNorth Korea-linked APT Gleaming Pisces deliver new PondRAT backdoor via malicious Python packages

North Korea-linked APT Gleaming Pisces deliver new PondRAT backdoor via malicious Python packages

North Korea-linked APT group Gleaming Pisces is distributing a new malware called PondRAT through tainted Python packages. Unit 42 researchers…

9 months ago