Tag: apt
-
Russia-Sponsored Cyberattackers Infiltrate Microsoft’s Code Base
The Midnight Blizzard APT is mounting a sustained, focused cyber campaign against the computing kahuna, using secrets it stole from emails back in Jan… First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/russia-sponsored-cyberattackers-infiltrate-microsoft-s-code-base
-
Chinese Panda APT Hacking Websites To Infect Windows And MacOS Users
Evasive Panda dubbed BRONZE HIGHLAND and Daggerfly, a Chinese-speaking APT group operating since at least 2012, has been spotted conducting cyber… First seen on gbhackers.com Jump to article: gbhackers.com/china-panda-apt-malware-attack/
-
New APT Group ‘Lotus Bane’ Behind Recent Attacks on Vietnam’s Financial Entities
A financial entity in Vietnam was the target of a previously undocumented threat actor called;Lotus Bane;that was first detected in March 2023.Singapo… First seen on thehackernews.com Jump to article: thehackernews.com/2024/03/new-apt-group-lotus-bane-behind-recent.html
-
ScreenConnect flaws exploited to drop new ToddlerShark malware
The North Korean APT hacking group Kimsuky is exploiting ScreenConnect flaws, particularly CVE-2024-1708 and CVE-2024-1709, to infect targets with a n… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/screenconnect-flaws-exploited-to-drop-new-toddlershark-malware/
-
ScreenConnect flaws exploited to drop new ToddleShark malware
The North Korean APT hacking group Kimsuky is exploiting ScreenConnect flaws, particularly CVE-2024-1708 and CVE-2024-1709, to infect targets with a n… First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/screenconnect-flaws-exploited-to-drop-new-toddleshark-malware/
-
Complete Guide to Advanced Persistent Threat (APT) Security
This is what an advanced persistent threat (APT) attack is like. APTs are sophisticated, targeted cyberattacks designed to evade detection and steal s… First seen on securityboulevard.com Jump to article: securityboulevard.com/2024/03/complete-guide-to-advanced-persistent-threat-apt-security/
-
Chinese APT Developing Exploits to Defeat Already Patched Ivanti Users
More bad news for Ivanti customers: soon, even if you’ve patched, you still might not be safe from relentless attacks from high-level Chinese threat a… First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/chinese-apt-exploits-defeat-patched-ivanti-users
-
‘Voltzite’ Zaps African Utilities as Part of Volt Typhoon’s Onslaught
The China-backed APT that’s been trying to set itself up inside US critical infrastructure for the purpose of disrupting physical processes is deployi… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/voltzite-zaps-african-utilities-volt-typhoon-onslaught
-
iSoon’s Secret APT Status Exposes China’s Foreign Hacking Machinations
First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/-isoon-contractor-helps-the-prc-hack-foreign-governments-companies
-
Iranian APTs Dress Up as Hacktivists for Disruption, Influence Ops
First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/iranian-apts-dress-up-as-hacktivists-for-disruption-influence-ops
-
Russian APT ‘Winter Vivern’ Targets European Government, Military
TAG-70’s sophisticated espionage campaign targeted a range of geopolitical targets, suggesting a highly capable and well-funded state-backed threat ac… First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/russian-apt-winter-vivern-targets-european-government-military
-
Schlag gegen Hackergruppe APT 28: Cyberspionage-Plattform aus WLAN-Routern abgeschaltet
Die Hackergruppe APT 28 hatte im Auftrag des russischen Militärgeheimdiensts (GRU) Schadsoftware auf Hunderten Routern in Büros und privaten Haushalte… First seen on csoonline.com Jump to article: www.csoonline.com/de/a/cyberspionage-plattform-aus-wlan-routern-abgeschaltet
-
U.S. authorities disrupt Russian intelligence’s botnet
In January 2024, an operation dismantled a network of hundreds of SOHO routers controlled by GRU Military Unit 26165, also known as APT 28, Sofacy Gro… First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2024/02/16/us-authorities-disrupt-russian-intelligence-botnet/
-
Russian APT Turla Wields Novel Backdoor Malware Against Polish NGOs
A spate of recent cyber-espionage attacks showcases Turla’s brand-new modular custom malware, and an expansion of the state-sponsored group’s scope of… First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/russian-apt-turla-novel-backdoor-malware-polish-ngos
-
Legacy account hacked by Russian APT had no MFA
Microsoft has begun notifying other organizations that have been targeted in recent attacks by Midnight Blizzard, a Russian nation-state actor also kn… First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366567936/Microsoft-Legacy-account-hacked-by-Russian-APT-had-no-MFA
-
Microsoft breached by Russian APT behind SolarWinds attack
Several email accounts belonging to Microsoft senior leadership were accessed as part of the breach, though Microsoft found ‘no evidence’ of customer … First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366567157/Microsoft-breached-by-Russian-APT-behind-SolarWinds-attack
-
HPE breached by Russian APT behind Microsoft hack
First seen on techtarget.com Jump to article: www.techtarget.com/searchsecurity/news/366567743/HPE-breached-by-Russian-APT-behind-Microsoft-hack
-
MITRE ATT&CK-Evaluierung: SentinelOne liefert hervorragende Ergebnisse
Die Evaluation for Managed Services bewertet die Fähigkeit von Anbietern, das Verhalten von Angreifern aus OilRig, auch bekannt als APT 34, zu analysi… First seen on infopoint-security.de Jump to article: www.infopoint-security.de/mitre-attck-evaluierung-sentinelone-liefert-hervorragende-ergebnisse/a32683/
-
Hackergruppen aus Russland, Nordkorea, Iran und China ungebremst aktiv
ESET gibt mit seinem neuen APT (Advanced Persistent Threat) Activity Report einen regelmäßigen Überblick über die Tätigkeiten dieser Hackergruppen und… First seen on infopoint-security.de Jump to article: www.infopoint-security.de/hackergruppen-aus-russland-nordkorea-iran-und-china-ungebremst-aktiv/a32693/
-
FBI vermutet Lazarus hinter Harmony-Hack
Die Verwendung von Code-Signing-Maschinenidentitäten macht es besonders schwer die Attacken der APT abzuwehren. Durch den Diebstahl von Code-Signatur-… First seen on infopoint-security.de Jump to article: www.infopoint-security.de/fbi-vermutet-lazarus-hinter-harmony-hack/a33251/
-
DLL-Hijacking: Asiatische Angreifer nutzen gestohlenes VPN-Zertifikat für Angriffe
Trotz der beobachteten Indikatoren bleibt eine genaue Zuordnung der Aktivitäten schwierig. Das chinesische APT-Ökosystem zeichnet sich durch eine umfa… First seen on infopoint-security.de Jump to article: www.infopoint-security.de/dll-hijacking-asiatische-angreifer-nutzen-gestohlenes-vpn-zertifikat-fuer-angriffe/a35157/
-
SentinelOne untersucht APT Sandman – LuaJIT-Toolkit nimmt TK-Unternehmen ins Visier
Die Implementierung von LuaDream deutet auf ein gut organisiertes und aktiv weiterentwickeltes Projekt von beträchtlichem Umfang hin. Die Malware best… First seen on infopoint-security.de Jump to article: www.infopoint-security.de/sentinelone-untersucht-apt-sandman-luajit-toolkit-nimmt-tk-unternehmen-ins-visier/a35431/
-
Patch Now: Critical TeamCity Bug Allows for Server Takeovers
Cyberattackers can exploit a vulnerability in JetBrain’s continuous integration and delivery (CI/CD) server (a popular APT target) to gain administrat… First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/patch-critical-teamcity-bug-server-takeover
-
Google Play Used to Spread ‘Patchwork’ APT’s Espionage Apps
First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/google-play-spread-patchwork-apt-espionage-apps
-
Ukraine Military Targeted With Russian APT PowerShell Attack
First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/ukraine-military-targeted-with-russian-apt-powershell-attack
-
Feds Confirm Remote Killing of Volt Typhoon’s SOHO Botnet
The China-backed APT was using the botnet, made up of mostly end-of-life, patchless routers from Cisco and Netgear, to set up shop inside US critical … First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/feds-confirm-remote-killing-volt-typhoon-soho-botnet
-
Move Over, APTs: Cybercriminals Now Target Critical Infrastructure Too
First seen on darkreading.com Jump to article: www.darkreading.com/ics-ot-security/common-cybercriminals-begin-critical-infrastructure-targeting
-
Turkish APT ‘Sea Turtle’ Resurfaces to Spy on Kurdish Opposition
First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/turkish-apt-sea-turtle-spy-kurdish-opposition
-
Turkish APT Sea Turtle Resurfaces, Spies on Dutch IT Firms
Tags: aptFirst seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/turkish-apt-sea-turtle-resurfaces/