Tag: group
-
TechTalk: Leading European Sovereign Cloud
Auf dem A1 Group ICT Summit 2026 stand uns Mathias Nöbauer, CEO von Exoscale einem Tochterunternehmen der A1 Digital International GmbH Co KG für zwei Fragen zum Thema Cloud-Soveränität zur Verfügung, die er in knapp zwei Minuten beantwortete. First seen on ap-verlag.de Jump to article: ap-verlag.de/techtalk-leading-european-sovereign-cloud/109321/
-
Hackers Hide PapRAT Malware in Fake Diplomatic Invitations to Take Control of Windows Systems
A campaign by the BITTER threat group that delivers a custom remote access trojan (RAT) called PapRAT to South Asian organizations. FortiGuard attributes the activity to the group with high confidence, based on lure filenames, command-and-control (C2) patterns, file metadata, and malware analysis The campaign uses three chains. The first relies on a malicious LNK…
-
Google Dismantles XCPE Botnet That Infected 1.3 Million Android TV Devices With Preinstalled Malware
Google and industry partners have dismantled the XCPE botnet. This firmware-level backdoor enrolled more than 1.3 million Android set-top boxes. Google Threat Intelligence Group (GTIG) assesses with high confidence that Android OEM and ODM Videostrong Technology Co. built and operated the backdoor for profit. The Google Threat Intelligence report calls it intentional, not a rogue…
-
Business groups mount fresh campaign for long-term renewal of information sharing law
Their target for extending CISA 2015 is the annual “must-pass” defense authorization bill, but a more than year-long standoff persists. First seen on cyberscoop.com Jump to article: cyberscoop.com/business-groups-cisa-2015-renewal-ndaa-cybersecurity/
-
PapRAT Cyber-Espionage Campaign Leaves a ‘Bitter’ Taste in South Asia
Organizations in the region face growing cyberattacks from the known India-linked threat group, which leverages legitimate Windows functionality in three distinct attack chains. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/paprat-cyberespionage-campaign-bitter-south-asia
-
PapRAT Cyber-Espionage Campaign Leaves a ‘Bitter’ Taste in South Asia
Organizations in the region face growing cyberattacks from the known India-linked threat group, which leverages legitimate Windows functionality in three distinct attack chains. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/paprat-cyberespionage-campaign-bitter-south-asia
-
PapRAT Cyber-Espionage Campaign Leaves a ‘Bitter’ Taste in South Asia
Organizations in the region face growing cyberattacks from the known India-linked threat group, which leverages legitimate Windows functionality in three distinct attack chains. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/paprat-cyberespionage-campaign-bitter-south-asia
-
Anti-Oligarchy Activists Plan to Dox Elon Musk and Hundreds of Billionaire-Linked Homes
Tags: groupThe Capytistas, a secretive group claiming more than $1.2 million in backing, started with Elon Musk and Tesla’s board. Members argue that those who buy political power deserve the scrutiny they’ll impose. First seen on wired.com Jump to article: www.wired.com/story/anti-oligarchy-activists-plan-to-dox-elon-musk-and-hundreds-of-billionaire-linked-homes/
-
Anti-Oligarchy Activists Plan to Dox Elon Musk and Hundreds of Billionaire-Linked Homes
Tags: groupThe Capytistas, a secretive group claiming more than $1.2 million in backing, started with Elon Musk and Tesla’s board. Members argue that those who buy political power deserve the scrutiny they’ll impose. First seen on wired.com Jump to article: www.wired.com/story/anti-oligarchy-activists-plan-to-dox-elon-musk-and-hundreds-of-billionaire-linked-homes/
-
Anti-Oligarchy Activists Plan to Dox Elon Musk and Hundreds of Billionaire-Linked Homes
Tags: groupThe Capytistas, a secretive group claiming more than $1.2 million in backing, started with Elon Musk and Tesla’s board. Members argue that those who buy political power deserve the scrutiny they’ll impose. First seen on wired.com Jump to article: www.wired.com/story/anti-oligarchy-activists-plan-to-dox-elon-musk-and-hundreds-of-billionaire-linked-homes/
-
Google disrupts XCPE botnet, bans the company behind it
Google shut down the servers behind XCPE, a backdoor hidden in the firmware of Android TV set-top boxes. Google’s Threat Intelligence Group attributes the operation with high … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/02/xcpe-botnet-android-backdoor/
-
As the White House touts its AI task force, CISA is conspicuously missing
Without the cybersecurity agency, experts said, the new group could stumble as it tries to work with critical infrastructure operators on AI security. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisa-white-house-ai-task-force-missing-trump/873338/
-
Russian and Ukrainian hackers hijack emergency apps to spread fake nuclear attack warnings
A popular Ukrainian air raid alert system was hacked over the weekend, prompting a cyber group to breach a similar Russian system in retaliation. First seen on therecord.media Jump to article: therecord.media/ukraine-hackers-russia-alert-system
-
PapRAT Cyber Espionage Campaign Leaves a ‘BITTER’ Taste in South Asia
Organizations in the region face attacks from the known India-linked threat group, which leverages legitimate Windows functionality in three distinct attack chains. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/paprat-cyberespionage-campaign-bitter-south-asia
-
PER Group ITK-Reputationsranking 2026: Reichweite ersetzt keine Reputation
ITK-Reputationsranking 2026: Materna und G DATA führen das Ranking an. Warum Reichweite allein keinen guten Ruf garantiert und Management entscheidend ist. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/per-group-itk-reputationsranking-2026-reichweite-ersetzt-keine-reputation/a46961/
-
FBI Attributes Binance Heist to North Korea’s TraderTraitor
The FBI has blamed North Korean APT group TraderTraitor for the world’s biggest cyber heist First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/fbi-attributes-binance-north/
-
Product showcase: Trust Onion uses rotating codewords to verify callers
Tags: groupTrust Onion is a free app that gives trusted groups three rotating codewords to check who they are communicating with. It also includes signed selfies, message checks, and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/02/product-showcase-trust-onion/
-
Hackers Weaponize ARTEX AI Agents to Automate Network Intrusions and Steal Sensitive Data
Threat actors are weaponizing ARTEX, an autonomous penetration-testing framework, to accelerate network intrusions, escalate privileges, and steal sensitive information. Google Threat Intelligence Group and Mandiant investigations described in the supplied report show attackers delegating substantial portions of post-compromise operations to coordinated AI agents, compressing execution sequences into seconds. Observed since late August 2026, the activity…
-
Hackers Weaponize ARTEX AI Agents to Automate Network Intrusions and Steal Sensitive Data
Threat actors are weaponizing ARTEX, an autonomous penetration-testing framework, to accelerate network intrusions, escalate privileges, and steal sensitive information. Google Threat Intelligence Group and Mandiant investigations described in the supplied report show attackers delegating substantial portions of post-compromise operations to coordinated AI agents, compressing execution sequences into seconds. Observed since late August 2026, the activity…
-
Ransomware gang talked AI agents into doing much of its dirty work
The group behind the Aur0ra ransomware has been using AI agents to move through victim networks, collect credentials and work its way up to domain administrator access, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/02/aur0ra-ransomware-ai-agents/
-
Binance resumes customer withdrawals after record $6.3bn hack
Cryptocurrency exchange says 90% of losses covered as FBI blames North Korean state-sponsored group TraderTraitorThe cryptocurrency exchange Binance has started to allow its customers to withdraw their funds from the platform, as it recovers from a record $6.3bn (£4.7bn) hack.The exchange was hit by the theft on Thursday, which has since been described as the…
-
FBI Links North Korea’s TraderTraitor to Record $6.43 Billion Binance Crypto Heist
The U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 billion in virtual assets to TraderTraitor, a North Korea-aligned elite hacking group also tracked as Jade Sleet, Pressure Chollima, PUKCHONG, Slow Pisces, and UNC4899.The FBI, along with the U.S. Secret Service (USSS) and the Internal Revenue Service Criminal Investigation…
-
China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days
Vapor Panda targeted more than 200 organizations spanning at least 14 countries, according to CrowdStrike. The ongoing campaign is remarkably successful and operating at shocking speed. First seen on cyberscoop.com Jump to article: cyberscoop.com/china-vapor-panda-agentic-ai-artex-campaign-crowdstrike/
-
North Korean Hackers Steal $6.36 Billion From Binance in Largest Crypto Hack Ever
North Korea’s TraderTraitor group drained about $6.36 billion from Binance wallets across ten blockchains on October 29, 2026. TRM Labs, which published the findings, calls it the largest crypto theft on record. TRM Labs says the total is about four times the $1.5 billion Bybit heist of February 2025. North Korean hackers Binance theft According…
-
North Korea-linked group steals $6.3B from Binance in largest-ever cryptocurrency hack
Blockchain analysis firms say they have worked with Binance to freeze roughly half of the stolen money, and the exchange said it would cover all losses. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/binance-hack-north-korea-cryptocurrency-theft/873304/
-
California officials confirm grand jury subpoenas as states, civil groups brace to protect elections from federal encroachment
Los Angeles County officials told CyberScoop they received multiple grand jury subpoenas investigating alleged election fraud. States and civil groups call it a federal power play. First seen on cyberscoop.com Jump to article: cyberscoop.com/california-election-subpoenas-doj-voter-rolls/
-
Hackers Use Cursor and Claude AI to Automate Attacks in Aur0ra Ransomware Operations
Tags: access, ai, attack, credentials, cyber, cybercrime, exploit, group, hacker, ransomware, sophos, threatThe GOLD OGRE cybercrime group is using AI coding agents, including Cursor and Anthropic’s Claude, to automate intrusions for Aur0ra ransomware (Aurora). Sophos researchers say the agents moved from credential access to domain administrator with little human involvement. Aur0ra ransomware AI attacks In May 2026, Sophos Counter Threat Unit (CTU) researchers reported an AI-assisted post-exploitation…
-
Hackers Target Asian Governments With New NetamLoader Malware Hidden in Windows Update Files
Kaspersky researchers have uncovered NetamLoader, a .NET loading framework built on XAML markup. It appears to be a supply-chain attack on a customized Windows build used only by Asian government bodies. No known APT group has been linked to it. NetamLoader malware Kaspersky Security Network flagged a .config file that used AppDomainManager injection to load…
-
Fake Polymarket Scam Network Claims Nearly $11 Million in Cryptocurrency Deposits
Russian-language >>traffer<< teams are selling ready-made fake prediction-market platforms to affiliates. One of them, AtlasCore, claims about $10.97 million in victim deposits. Recorded Future's Insikt Group tracked the campaigns, which impersonate sites like Polymarket and Kalshi. The deposit figures come from the threat actors themselves and are unverified. Fake Polymarket scam Since spring 2026, AtlasCore,…
-
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware
A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Controllers, to deploy a custom malware framework called KeyDrift. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-cisco-sd-wan-flaw-to-deploy-custom-keydrift-malware/