Malware & Threats
Nimbus Manticore has continued its operations during and after the US military campaign against Iran.
Hi, what are you looking for?
SecurityWeek
All posts tagged "APT"
Malware & Threats
The APT28 threat group exploited vulnerable TP-Link and MikroTik routers to conduct adversary-in-the-middle (AitM) attacks.
Mobile & Wireless
The state-sponsored group’s campaign has targeted government, higher education, financial, and legal entities, as well as think tanks.
Cyberwarfare
Analysis reveals a six-month buildup of Iran-linked cyber infrastructure, including US-based shell companies, designed to weather kinetic strikes and ensure the resilience of its...
Nation-State
The attacks, observed since February, show that Iranian hackers already have a presence in the networks of US organizations.
Malware & Threats
The attacks targeting Europe were analyzed by Ukraine’s CERT-UA and the cybersecurity company Zscaler.
Malware & Threats
After years of exploiting zero-day and n-day vulnerabilities, Russian state-sponsored threat actors are shifting to misconfigured devices.
Malware & Threats
The state-sponsored hackers relied on phishing emails to deliver a malicious payload to Reporters Without Borders (RSF).
Malware & Threats
APT24 has been relying on various techniques to drop the BadAudio downloader and then deploy additional payloads.
Nation-State
Star Blizzard started using the NoRobot (BaitSwitch) and MaybeRobot (SimpleFix) malware after public reporting on the LostKeys malware.
Nation-State
Focused on espionage, the threat actor shares infrastructure with Chinese APTs, but uses different TTPs in attacks.
Nation-State
Pakistani state-sponsored hacking group APT36 is targeting Linux systems in a fresh campaign aimed at Indian government entities.
Nation-State
Russian state-sponsored hackers tracked as Static Tundra continue to target Cisco devices affected by CVE-2018-0171.
Nation-State
Russian state-sponsored APT Secret Blizzard has used ISP-level AitM attacks to infect diplomatic devices with malware.
Government
The UK government has sanctioned three Russian APTs and 18 individuals for their involvement in cyber operations against Ukraine, NATO allies, and EU.
Malware & Threats
China-linked Silver Fox hacking group is targeting Chinese users with fake installers carrying a RAT and a rootkit.
Nation-State
A Chinese APT has been infecting SOHO routers with the ShortLeash backdoor to build stealthy espionage infrastructure.
Ransomware
Multiple legitimate, unusual tools were used in a Fog ransomware attack, including one employed by Chinese hacking group APT41.
Malware & Threats
Microsoft and CrowdStrike are running a project that aims to align threat actor names, and Google and Palo Alto Networks will also contribute.
Nation-State
The Chinese state-sponsored group Mustang Panda has used new and updated malicious tools in a recent attack.
Artificial Intelligence
Anthropic takes Fable 5 and Mythos 5 offline to comply with a directive from the Trump administration to prevent use by foreign nationals.
Artificial Intelligence
Incident Response
Vulnerabilities
Data Breaches
Someone posted fake VRChat and Discord data breach reports on the system, prompting the Maine AG to take action.
Supply Chain Security
Management & Strategy
Artificial Intelligence
Vulnerabilities
