Malware & Threats
APT24 has been relying on various techniques to drop the BadAudio downloader and then deploy additional payloads.
Hi, what are you looking for?
SecurityWeek
All posts tagged "China"
Nation-State
Britain’s domestic intelligence agency warned that Chinese nationals were ”using LinkedIn profiles to conduct outreach at scale” on behalf of the Chinese Ministry of...
Phishing
The cybercriminals informed customers that their cloud server was shut down due to complaints.
Government
Federal agencies have reported as ‘patched’ ASA or FTD devices running software versions vulnerable to attacks.
Cyberwarfare
NTT’s chief cybersecurity strategist Mihoko Matsubara on the new geopolitics of hacking, the "chicken and egg" problem of 5G, and the AGI threat to...
Phishing
Google is targeting the threat group known as Smishing Triad, which used over 194,000 malicious domains in a campaign.
Nation-State
Ribbon Communications provides technology for communications networks and its customers include the US government and major telecom firms.
Phishing
The malicious Smishing Triad domains were used to collect sensitive information, including Social Security numbers.
Cyberwarfare
The Ministry of State Security alleged that the NSA exploited vulnerabilities in the messaging services of a foreign mobile phone brand to steal sensitive...
Data Breaches
More information has come to light on the cyberattack disclosed this week by F5, including on attribution and potential risks.
Data Breaches
F5 shared few details on the threat actor, but the attack profile seems to point to China.
Nation-State
BIETA and its subsidiary CIII research develop and sell technologies supporting China’s intelligence, counterintelligence, and military operations.
Nation-State
Focused on espionage, the threat actor shares infrastructure with Chinese APTs, but uses different TTPs in attacks.
Vulnerabilities
Leading to remote code execution and privilege escalation, the flaws were exploited on Cisco ASA 5500-X series devices that lack secure boot.
Nation-State
RedNovember has been targeting government, defense and aerospace, and legal services organizations worldwide.
Nation-State
Google’s Threat Intelligence Group and Mandiant link the BrickStorm campaign to UNC5221, warning that hackers are analyzing stolen code to weaponize zero-day vulnerabilities.
Nation-State
The campaign targeted US government, think tank, and academic entities involved in US-China relations, international trade, and economic policy.
Nation-State
China’s APT41 sent out malicious emails on behalf of Rep. John Moolenaar to collect information ahead of US-China trade talks.
Cyberwarfare
China-linked APT ‘Salt Typhoon’ exploited known router flaws to maintain persistent access across telecom, government, and military networks, giving Beijing’s intelligence services global surveillance...
Malware & Threats
Google researchers say China-linked UNC6384 combined social engineering, signed malware, and adversary-in-the-middle attacks to evade detection.
Vulnerabilities
It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.
Malware & Threats
Vulnerabilities
Vulnerabilities
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: Siemens details security advisory policy, OpenAI Codex backdoor risk, Microsoft warns of model weight backdoors.
Data Breaches
Vulnerabilities
