Tag: apt
-
North Korea-linked Kimsuky APT attack targets victims via Messenger
North Korea-linked Kimsuky APT group employs rogue Facebook accounts to target victims via Messenger and deliver malware. Researchers at Genius Securi… First seen on securityaffairs.com Jump to article: securityaffairs.com/163265/apt/north-korea-kimsuky-apt-uses-messenger.html
-
Cyberkrieg: Russland führt Cyberangriffe auf deutsche Einrichtungen aus
Die Bundesregierung hat eine Serie von Cyberangriffen scharf verurteilt, die der Gruppe APT 28 des russischen Militärgeheimdiensts GRU zugeschrieben w… First seen on golem.de Jump to article: www.golem.de/news/cyberkrieg-russland-fuehrt-cyberangriffe-auf-deutsche-einrichtungen-aus-2405-184823.html
-
Kaspersky Reveals Global Rise in APTs, Hacktivism and Targeted Attacks
Kaspersky’s Global Research and Analysis Team (GReAT) has released its latest quarterly report (Q1 2024) on the advanced persistent threat (APT) activ… First seen on hackread.com Jump to article: www.hackread.com/kaspersky-rise-apt-hacktivism-targeted-attacks/
-
DPRK’s Kimsuky APT Abuses Weak DMARC Policies, Feds Warn
First seen on darkreading.com Jump to article: www.darkreading.com/cloud-security/dprks-kimsuky-apt-abuses-weak-dmarc-policies-feds-warn
-
North Korea APT Triumvirate Spied on South Korean Defense Industry For Years
Lazarus, Kimsuky, and Andariel all got in on the action, stealing important data from firms responsible for defending their southern neighbors (from t… First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/north-korea-apt-triumvirate-spied-on-south-korean-defense-industry-for-years
-
Teetering on the Edge: VPNs, Firewalls’ Nonexistent Telemetry Lures APTs
State-sponsored groups are targeting critical vulnerabilities in virtual private network (VPN) gateways, firewall appliances, and other edge devices t… First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/edge-vpns-firewalls-nonexistent-telemetry-apts
-
ToddyCat APT Is Stealing Data on ‘Industrial Scale’
First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/-toddycat-apt-is-stealing-data-on-an-industrial-scale-
-
Russian APT Deploys New ‘Kapeka’ Backdoor in Eastern European Attacks
A previously undocumented flexible backdoor called Kapeka has been sporadically observed in cyber attacks targeting Eastern Europe, including Estonia … First seen on thehackernews.com Jump to article: thehackernews.com/2024/04/russian-apt-deploys-new-kapeka-backdoor.html
-
South Korean defense firms subjected to North Korean APT attacks
First seen on scmagazine.com Jump to article: www.scmagazine.com/brief/south-korean-defense-firms-subjected-to-north-korean-apt-attacks
-
Russian APT Group Thwarted in Attack on US Automotive Manufacturer
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/russian-apt-group-thwarted-in-attack-on-us-automotive-manufacturer
-
North Korea-linked APT groups target South Korean defense contractors
The National Police Agency in South Korea warns that North Korea-linked threat actors are targeting defense industry entities. The National Police Age… First seen on securityaffairs.com Jump to article: securityaffairs.com/162193/apt/north-korea-south-korean-defense-contractors.html
-
Pakistani APT Hackers Attacking Indian Govt Entities With Weaponized Shortcut Files
Cybersecurity experts at Seqrite Labs have reported a surge in cyberattacks against Indian government entities. These attacks have been attributed to … First seen on gbhackers.com Jump to article: gbhackers.com/pakistani-apt-hackers/
-
Previously unknown Kapeka backdoor linked to Russian Sandworm APT
Russia-linked APT Sandworm employed a previously undocumented backdoor calledKapeka in attacks against Eastern Europe since 2022. WithSecure researche… First seen on securityaffairs.com Jump to article: securityaffairs.com/161987/hacking/kapeka-backdoor-linked-sandworm.html
-
Russia’s Sandworm APT linked to attack on Texas water plant
First seen on scmagazine.com Jump to article: www.scmagazine.com/news/russias-sandworm-apt-linked-to-attack-on-texas-water-plant
-
ESET APT Activity Report Q4 2022Q1 2023
Tags: aptFirst seen on welivesecurity.com Jump to article: www.welivesecurity.com/deutsch/2023/05/09/eset-apt-report-q4-2022-q1-2023/
-
APT Just Means Another Path Traversal
New Zero Day in Palo Alto GlobalProtect VPN Appliances Introduction On April 12th, Volexity announced they discovered zero day exploitation occurring … First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/04/apt-just-means-another-path-traversal/
-
Cyber Espionage: Turla APT Hackers Attack European Organization With Backdoor
Cybersecurity experts have uncovered a failed attempt by the notorious Russia-based Turla Advanced Persistent Threat (APT) group to infiltrate an Alba… First seen on gbhackers.com Jump to article: gbhackers.com/cyber-espionage-turla-apt-hackers-attack-european-organization-with-backdoor/
-
Vedalia APT Group Exploits Oversized LNK Files to Deliver Malware
The Vedalia Advanced Persistent Threat (APT) group, also known by its alias Konni, has been distributing malware using an innovative technique involvi… First seen on gbhackers.com Jump to article: gbhackers.com/vedalia-apt-group-exploits/
-
Two Chinese APT Groups Ramp Up Cyber Espionage Against ASEAN Countries
Two China-linked advanced persistent threat (APT) groups have been observed targeting entities and member countries affiliated with the Association of… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/two-chinese-apt-groups-ramp-up-cyber.html
-
APT-Gruppe TA450: Hacker attackieren Israel
Die Hackergruppe TA450, die mit dem Iran in Verbindung stehen soll, hat laut einem Security-Anbieter seinen Angriffstaktiken auf israelische Unternehm… First seen on csoonline.com Jump to article: www.csoonline.com/de/a/hacker-attackieren-israel
-
Saudi Arabia, UAE Top List of APT-Targeted Nations in the Middle East
Government, manufacturing, and the energy industry are the top targets of advanced, persistent threat actors, with phishing attacks and remote exploit… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/saudi-arabia-uae-top-list-of-apt-targeted-nations-in-middle-east
-
Russian APT Releases More Deadly Variant of AcidRain Wiper Malware
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/russian-apt-releases-more-deadly-variant-of-acidrain-wiper-malware
-
Iran-Linked APT TA450 embeds malicious links in PDF attachments
In recent campaigns, Iran-linked APT group MuddyWater used a legitimate Remote Monitoring and Management (RMM) solution called Atera. Proofpoint resea… First seen on securityaffairs.com Jump to article: securityaffairs.com/161042/apt/iran-ta450-rmm-atera.html
-
iSoon Leak Shows Links to Chinese APT Groups
The Firm Is Operating Alongside RedHotel, RedAlpha and Poison Carp. Chinese hacking contractor iSoon supported three separate cyberespionage operation… First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/isoon-leak-shows-links-to-chinese-apt-groups-a-24713
-
Cozy Bear and other APTs changing tack as cloud adoption increases
First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366571339/Cozy-Bear-and-other-APTs-changing-tack-as-cloud-adoption-increases
-
Chinese APT ‘Earth Krahang’ Compromises 48 Gov’t Orgs on 5 Continents
First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/chinese-apt-earth-krahang-compromised-48-gov-orgs-5-continents
-
Five Eyes Agencies Issue New Alert on Chinese APT Volt Typhoon
Government agencies in the Five Eyes countries warn critical infrastructure entities of Chinese state-sponsored hacking group Volt Typhoon. The post n… First seen on securityweek.com Jump to article: www.securityweek.com/five-eyes-agencies-issue-new-alert-on-chinese-apt-volt-typhoon/
-
Chinese APT Hacks 48 Government Organizations
Earth Krahang, likely a penetration team of Chinese government contractor I-Soon, has compromised 48 government entities worldwide. The post ahang, li… First seen on securityweek.com Jump to article: www.securityweek.com/chinese-apt-hacks-48-government-organizations/
-
Earth Krahang APT breached tens of government organizations worldwide
Trend Micro uncovered a sophisticated campaign conducted by Earth Krahang APT group that breached 70 organizations worldwide. Trend Micro researchers … First seen on securityaffairs.com Jump to article: securityaffairs.com/160702/apt/earth-krahang-apt.html
-
Lazarus APT group returned to Tornado Cash to launder stolen funds
North Korea-linked Lazarus APT group allegedly using again the mixer platform Tornado Cash to launder $23 million. North Korea-linked Lazarus APT gro… First seen on securityaffairs.com Jump to article: securityaffairs.com/160525/breaking-news/lazarus-apt-returned-tornado-cash.html