Tag: apt
-
GoldenJackal APT group breaches air-gapped systems in Europe
ESET researchers have discovered a series of attacks that took place in Europe from May 2022 to March 2024, where the attackers used a toolset capable… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/09/goldenjackal-air-gapped-systems-compromise/
-
China-Backed APT Group Culling Thai Government Data
CeranaKeeper is bombarding Southeast Asia with data exfiltration attacks via file-sharing services such as Pastebin, OneDrive, and GitHub, researchers… First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/new-china-backed-apt-group-culling-thai-government-data
-
North Korea’s ‘Stonefly’ APT Swarms US Private Co’s. for Profit
Despite a $10 million bounty on one member, APT45 is not slowing down, pivoting from intelligence gathering to extorting funds for Kim Jong-Un’s regim… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/stonefly-apt-us-private-cos-north-korean-profit
-
Python-Based Malware Slithers Into Systems via Legit VS Code
The prolific Chinese APT Mustang Panda is the likely culprit behind a sophisticated cyber-espionage attack that sets up persistent remote access to vi… First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/python-malware-slithers-legit-vs-code
-
Likho Hackers Using MeshCentral For Remotely Managing Victim Systems
The Awaken Likho APT group launched a new campaign in June of 2024 with the intention of targeting Russian government agencies and businesses by targe… First seen on gbhackers.com Jump to article: gbhackers.com/likho-apt-meshcentral-shift/
-
European govt air-gapped systems breached using custom malware
An APT hacking group known as GoldenJackal has successfully breached air-gapped government systems in Europe using two custom toolsets to steal sensit… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/european-govt-air-gapped-systems-breached-using-custom-malware/
-
China-linked group Salt Typhoon hacked US broadband providers and breached wiretap systems
China-linked APT group Salt Typhoon breached U.S. broadband providers, potentially accessing systems for lawful wiretapping and other data. China-link… First seen on securityaffairs.com Jump to article: securityaffairs.com/169460/apt/salt-typhoon-hacked-us-broadband-providers.html
-
Neue APT-Gruppe CeranaKeeper missbraucht Dropbox und Github
First seen on heise.de Jump to article: www.heise.de/news/Neue-APT-Gruppe-CeranaKeeper-missbraucht-Dropbox-und-Github-9961562.html
-
Private US companies targeted by Stonefly APT
Undeterred by the indictment issued against one of its alleged members, North Korean APT group Stonefly (aka APT45) continues to target companies in t… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/10/03/private-us-companies-targeted-by-stonefly-apt/
-
Transparent Tribe APT Group’s New Arsenal: Mythic Poseidon, Linux, and C2 Takedown
A recent report by CYFIRMA sheds light on the infrastructure supporting the activities of the Advanced Persistent Threat (APT) group known as Transpar… First seen on securityonline.info Jump to article: securityonline.info/transparent-tribe-apt-groups-new-arsenal-mythic-poseidon-linux-and-c2-takedown/
-
Advanced Cyberattacks: Patchwork APT’s Nexe Backdoor Campaign Exposed
In a new report from Cyble Research and Intelligence Labs (CRIL), the notorious Patchwork APT group has once again demonstrated its cyber-espionage pr… First seen on securityonline.info Jump to article: securityonline.info/advanced-cyberattacks-patchwork-apts-nexe-backdoor-campaign-exposed/
-
Iranian APT Facilitating Remote Access To Target Networks
As per recent reports, an Iranian Advanced Persistent Threat (APT) hacker is now playing a facilitator role in aiding remote access to target networks… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/10/iranian-apt-facilitating-remote-access-to-target-networks/
-
FIN7 hackers launch deepfake nude generator sites to spread malware
The notorious APT hacking group known as FIN7 launched a network of fake AI-powered deepnude generator sites to infect visitors with information-steal… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/fin7-hackers-launch-deepfake-nude-generator-sites-to-spread-malware/
-
Iranian APT caught acting as access broker for ransomware crews
Members of Iran-backed Pioneer Kitten APT appear to be trying to supplement their pay packets by helping Russian-speaking ransomware gangs to access t… First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366609258/Iranian-APT-caught-acting-as-access-broker-for-ransomware-crews
-
Diehl Defence reportedly attacked by Kimsuky APT
Tags: aptFirst seen on scworld.com Jump to article: www.scworld.com/brief/diehl-defence-reportedly-attacked-by-kimsuky-apt
-
Thailändische Regierung von neuem APT CeranaKeeper angegriffen
First seen on heise.de Jump to article: www.heise.de/news/Neue-APT-Gruppe-CeranaKeeper-missbraucht-Dropbox-und-Github-9961562.html
-
North Korea-linked APT Kimsuky targeted German defense firm Diehl Defence
North Korea-linked APT Kimsuky has been linked to a cyberattack on Diehl Defence, a German manufacturer of advanced military systems. North Korea-link… First seen on securityaffairs.com Jump to article: securityaffairs.com/169162/apt/kimsuky-apt-hit-diehl-defence.html
-
‘SloppyLemming’ APT Abuses Cloudflare Service in Pakistan Attacks
First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/sloppylemming-apt-cloudflare-pakistan-attacks
-
Iranian APT Peach Sandstorm teases new Tickler malware
Peach Sandstorm, an Iranian state threat actor, has developed a dangerous new malware strain that forms a key element of a rapidly evolving attack seq… First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366609332/Iranian-APT-Peach-Sandstorm-teases-new-Tickler-malware
-
Patchwork APT Group Unleashes Nexe Backdoor: A New Era in Cyber Espionage Tactics
Recent analyses by Cyble Research and Intelligence Labs (CRIL) have brought to light an ongoing cyber campaign orchestrated by the notorious Patchwork… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/patchwork-apt-group/
-
Iranian APT UNC1860 Linked to MOIS Facilitates Cyber Intrusions in Middle East
An Iranian advanced persistent threat (APT) threat actor likely affiliated with the Ministry of Intelligence and Security (MOIS) is now acting as an i… First seen on thehackernews.com Jump to article: thehackernews.com/2024/09/iranian-apt-unc1860-linked-to-mois.html
-
Why is Chinese threat actor APT 41 in a tearing hurry?
Since June 1st 2024, Chinese frontline threat actor APT 41 has been linked to as many as 63 events globally. These include attacks on Taiwanese resear… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/09/why-is-chinese-threat-actor-apt-41-in-a-tearing-hurry/
-
North Korean Hackers Gleaming Pisces Poisoned Python Packages Target Linux macOS
Unit 42 researchers have uncovered a new cyberattack campaign by the North Korean-affiliated APT group, Gleaming Pisces, targeting Linux and macOS sys… First seen on securityonline.info Jump to article: securityonline.info/north-korean-hackers-gleaming-pisces-poisoned-python-packages-target-linux-macos/
-
China’s ‘Earth Baxia’ Spies Exploit Geoserver to Target APAC Orgs
The APT group uses spear-phishing and a vulnerability in a geospatial data-sharing server to compromise organizations in Taiwan, Japan, the Philippine… First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/china-earth-baxia-spies-geoserver-apac-orgs
-
US Disrupts Raptor Train Botnet Of Chinese APT Flax Typhoon
First seen on packetstormsecurity.com Jump to article: packetstormsecurity.com/news/view/36383/US-Disrupts-Raptor-Train-Botnet-Of-Chinese-APT-Flax-Typhoon.html
-
China-linked APT group Salt Typhoon compromised some U.S. internet service providers (ISPs)
China-linked threat actors compromised some U.S. internet service providers (ISPs) as part of a cyber espionage campaign code-named Salt Typhoon. Chin… First seen on securityaffairs.com Jump to article: securityaffairs.com/168941/apt/salt-typhoon-china-linked-threat-actors-breached-us-isp.html
-
ESET APT Activity Report Q4 2022Q1 2023
Tags: aptFirst seen on welivesecurity.com Jump to article: www.welivesecurity.com/deutsch/2023/05/09/eset-apt-report-q4-2022-q1-2023/
-
North Korean APT Bypasses DMARC Email Policies in Cyber-Espionage Attacks
First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/north-korean-apt-bypasses-dmarc-email-cyber-espionage-attacks
-
FBI Leads Takedown of Chinese Botnet Impacting 200K Devices
Once a user’s device is infected as part of an ongoing Flax Typhoon APT campaign, the malware connects it to a botnet called Raptor Train, initiating … First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/fbi-takedown-chinese-botnet-200k-devices
-
Malicious Python packages help North Korean APT deliver PondRAT malware
First seen on scworld.com Jump to article: www.scworld.com/brief/malicious-python-packages-help-north-korean-apt-deliver-pondrat-malware