Malware & Threats
China-linked Silver Fox hacking group is targeting Chinese users with fake installers carrying a RAT and a rootkit.
Hi, what are you looking for?
SecurityWeek
All posts tagged "APT"
Nation-State
A Chinese APT has been infecting SOHO routers with the ShortLeash backdoor to build stealthy espionage infrastructure.
Ransomware
Multiple legitimate, unusual tools were used in a Fog ransomware attack, including one employed by Chinese hacking group APT41.
Malware & Threats
Microsoft and CrowdStrike are running a project that aims to align threat actor names, and Google and Palo Alto Networks will also contribute.
Nation-State
The Chinese state-sponsored group Mustang Panda has used new and updated malicious tools in a recent attack.
Malware & Threats
Weaver Ant, a cyberespionage-focused APT operating out of China, is targeting telecom providers for persistent access.
Nation-State
The FishMonger APT group, a subdivision of Chinese cybersecurity firm I-Soon, compromised seven organizations in a 2022 campaign.
Malware & Threats
ZDI has uncovered 1,000 malicious .lnk files used by state-sponsored and cybercrime threat actors to execute malicious commands.
Mobile & Wireless
The North Korea-linked APT37 has been observed targeting Android users with spyware distributed via Google Play.
Nation-State
South American cyberespionage group Blind Eagle has infected over 1,600 organizations in Colombia in a recent campaign.
Artificial Intelligence
News analysis: The big AI platforms are emerging as frontline early warning systems, detecting nation-state hackers at the outset of their campaigns. Can this...
Incident Response
Chinese hackers remotely accessed US Treasury Department workstations after compromising a cloud-based service operated by BeyondTrust.
Endpoint Security
British EDR vendor Sophos details a years-long “cat-and-mouse” tussle with sophisticated Chinese government-backed hackers.
Malware & Threats
The SideWinder APT has been targeting ports and maritime facilities in the Indian Ocean and Mediterranean Sea in recent attacks.
Email Security
The US government warns of a North Korean threat actor abusing weak email DMARC settings to hide spear-phishing attacks.
Cyberwarfare
Threat intelligence firm EclecticIQ documents the delivery of malware phishing lures to government and private energy organizations in India.
Government
Government agencies in the Five Eyes countries warn critical infrastructure entities of Chinese state-sponsored hacking group Volt Typhoon.
Cloud Security
The CloudGrappler open source tool can detect the presence of known threat actors in cloud environments.
Incident Response
Microsoft says the Midnight Blizzard APT group may still be poking around its internal network after stealing source code, spying on emails.
Malware & Threats
Cisco links the espionage-focused ‘YoroTrooper’ threat actor to Kazakhstan.
Cybercrime
The notorious Hive successor ceases ransomware operations but pivots to pure data extortion under the new World Leaks brand.
Malware & Threats
Data Breaches
Artificial Intelligence
Tracking & Law Enforcement
Hacker Conversations
Mobile & Wireless
Network Security