Tag: apt
-
WinorDLL64: Backdoor aus dem Lazarus Arsenal?
egion und die Überschneidungen in Verhalten und Code lassen vermuten, dass das Tool von der berüchtigten, mit Nordkorea verbündeten APT-Gruppe verwend… First seen on welivesecurity.com Jump to article: www.welivesecurity.com/deutsch/2023/02/23/winordll64-backdoor-aus-dem-lazarus-arsenal/
-
China’s ‘Velvet Ant’ APT Nests Inside Multiyear Espionage Effort
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/china-velvet-ant-apt-multiyear-espionage
-
Die stille Gefahr: Wie APT-Gruppen Unternehmen infiltrieren
Tags: aptFirst seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/it-sicherheit/die-stille-gefahr-wie-apt-gruppen-unternehmen-infiltrieren-294171.html
-
Russia-linked APT Nobelium targets French diplomatic entities
French information security agency ANSSI reported that Russia-linked threat actor Nobelium is behind a series of cyber attacks that targeted French di… First seen on securityaffairs.com Jump to article: securityaffairs.com/164757/apt/french-anssi-russia-nobelium-attacks.html
-
22nd April Threat Intelligence Report
MITRE Corporation disclosed a security event that occurred in January 2024. The attack, which is linked to Chinese APT group UNC5221, involved exploit… First seen on research.checkpoint.com Jump to article: research.checkpoint.com/2024/22nd-april-threat-intelligence-report/
-
Chinese Velvet Ant Hackers Target F5 Devices in Years-Long Espionage
cover how China-linked Velvet Ant APT exploited F5 BIG-IP devices for years undetected. Sygnia’s detailed analysis exposes tactics used to maintain pe… First seen on hackread.com Jump to article: hackread.com/chinese-velvet-ant-hackers-target-f5-devices/
-
‘Sticky Werewolf’ APT Stalks Aviation Sector
The pro-Ukranian group has upgraded its infection chain, with credentials, strategic info on commercial pilots, or billion-dollar designs as the possi… First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/sticky-werewolf-apt-stalks-aviation-sector
-
Russia Aims Cyber Operations at Summer Olympics
As always, Russian APTs are hoping to foment unrest by stoking existing societal divides and fears, this time around the Olympics and EU politics; and… First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/russia-cyber-operations-summer-olympics
-
Chinese APT suspected of Ministry of Defence hack
First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366583712/Chinese-APT-suspected-of-Ministry-of-Defence-hack
-
LilacSquid APT Employs Open Source Tools, QuasarRAT
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/lilacsquid-apt-employs-open-source-tools-quasarrat
-
FlyingYeti APT Serves Up Cookbox Malware Using WinRAR
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/flyingyeti-apt-cookbox-malware-winrar
-
Multiple Chinese APTs Targeted Southeast Asian Government for Two Years
Multiple Chinese state-sponsored groups have targeted a Southeast Asian government in a years-long cyberespionage campaign. The post Chinese state-spo… First seen on securityweek.com Jump to article: www.securityweek.com/multiple-chinese-apts-targeted-southeast-asian-government-for-two-years/
-
‘Moonstone Sleet’ APT Melds Espionage, Financial Goals
North Korea’s newest threat actor uses every trick in the nation-state APT playbook, and most of cybercrime’s tricks, too. It also developed a whole v… First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/microsoft-moonlight-sleet-apt-melds-espionage-financial-goals
-
Pakistani ‘Transparent Tribe’ APT Aims for Cross-Platform Impact
Targeting India’s government, defense, and aerospace sectors, the cyber-threat group now attacks Linux as well as Windows in its quest to compromise t… First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/pakistani-transparent-tribe-apt-aims-for-cross-platform-impact
-
EU calls out Fancy Bear over attacks on Czech, German governments
The European Union, alongside member states Czechia and Germany, have accused Russian government APT Fancy Bear of being behind a series of attacks on… First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366583454/EU-calls-out-Fancy-Bear-over-attacks-on-Czech-German-governments
-
Inside Operation Diplomatic Specter: Chinese APT Group’s Stealthy Tactics Exposed
Governmental entities in the Middle East, Africa, and Asia are the target of a Chinese advanced persistent threat (APT) group as part of an ongoing cy… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/inside-operation-diplomatic-specter.html
-
LilacSquid APT targeted organizations in the U.S., Europe, and Asia since at least 2021
A previously undocumented APT group tracked as LilacSquid targeted organizations in the U.S., Europe, and Asia since at least 2021. Cisco Talos resear… First seen on securityaffairs.com Jump to article: securityaffairs.com/163927/apt/lilacsquid-targeted-orgs-in-us-europe-asia.html
-
Defending Against Persistent Phishing: A Real-World Case Study
One of the scariest acronyms in a CISO’s knowledge base is APT Advanced Persistent Threat. This term refers to someone determined to harm you and can … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/06/defending-against-persistent-phishing-a-real-world-case-study/
-
China APT Stole Geopolitical Secrets From Middle East, Africa & Asia
First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/china-apt-stole-geopolitical-secrets-from-middle-east-africa-and-asia
-
Chinese ‘ORB’ Networks Conceal APTs, Render Static IoCs Irrelevant
Mandiant warns that defenders must rethink how to thwart Chinese cyber-espionage groups now using professional infrastructure-as-a-service operational… First seen on darkreading.com Jump to article: www.darkreading.com/cybersecurity-operations/chinese-orb-networks-conceal-apts-make-tracking-iocs-irrelevant
-
James Nutland studies what makes threat actors tick, growing our understanding of the current APT landscape
Nutland says he goes into every engagement or new project with a completely open mind and a blank slate, using his background investigating terror ope… First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/researcher-spotlight-james-nutland/
-
Bitdefender Labs identifiziert neuen APT, der auf Regierungen und Militär abzielt
Die Experten der Bitdefender Labs veröffentlichen detaillierte Untersuchungen eines neuen APT (Advanced-Persistent-Threat) mit dem Namen
-
Iran APTs Tag Team Espionage, Wiper Attacks Against Israel & Albania
First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/iran-apts-tag-team-espionage-wiper-attacks-against-israel-and-albania
-
Russia’s Turla APT Abuses MSBuild to Deliver TinyTurla Backdoor
A threat campaign luring users with malicious documents related to human rights and public notices is aimed at giving the Russia-backed threat group a… First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/russia-turla-apt-msbuild-tinyturla-backdoor
-
Kimsuky APT Deploying Linux Backdoor Gomir in South Korean Cyber Attacks
The Kimsuky (aka Springtail) advanced persistent threat (APT) group, which is linked to North Korea’s Reconnaissance General Bureau (RGB), has been ob… First seen on thehackernews.com Jump to article: thehackernews.com/2024/05/kimsuky-apt-deploying-linux-backdoor.html
-
New APT Group >>Unfading Sea Haze<< Hits Military Targets in South China Sea
First seen on hackread.com Jump to article: www.hackread.com/unfading-sea-haze-military-target-south-china-sea/
-
North Korea-linked Kimsuky used a new Linux backdoor in recent attacks
Symantec warns of a new Linux backdoor used by the North Korea-linked Kimsuky APT in a recent campaign against organizations in South Korea. Symantec… First seen on securityaffairs.com Jump to article: securityaffairs.com/163364/apt/kimsuky-new-linux-backdoor.html
-
Turla APT Group Suspected of Utilizing Tiny BackDoor Exploiting MSBuild for Stealthy Attacks
Cyble Research and Intelligence Labs (CRIL) has discovered a sophisticated cyber campaign employing malicious LNK files, potentially distributed throu… First seen on thecyberexpress.com Jump to article: thecyberexpress.com/new-turla-apt-groups-tiny-backdoor-tactics/
-
Turla APT used two new backdoors to infiltrate a European ministry of foreign affairs
Russia-linked Turla APT allegedly used two new backdoors, named Lunar malware and LunarMail, to target European government agencies. ESET researchers … First seen on securityaffairs.com Jump to article: securityaffairs.com/163314/apt/turla-apt-new-backdoors.html
-
Russian APT Hackers Attacking Critical Infrastructure
Russia leverages a mix of state-backed Advanced Persistent Threat (APT) groups and financially motivated cybercriminals to achieve its strategic goals… First seen on gbhackers.com Jump to article: gbhackers.com/russian-apt-hackers-attacking-critical-infrastructure/