All posts tagged "advanced persistent threat"

• 

  823

  Malware

  Russian APT Deploys New ‘Kapeka’ Backdoor in Eastern European Attacks

  A previously undocumented “flexible” backdoor called Kapeka has been “sporadically” observed in cyber attacks targeting Eastern Europe, including Estonia and Ukraine, since...

• 

  1.7K

  Malware

  Finland Blames Chinese Hacking Group APT31 for Parliament Cyber Attack

  The Police of Finland (aka Poliisi) has formally accused a Chinese nation-state actor tracked as APT31 for orchestrating a cyber attack targeting...

• 

  1.2K

  Malware

  U.S. Charges 7 Chinese Nationals in Major 14-Year Cyber Espionage Operation

  The U.S. Department of Justice (DoJ) on Monday unsealed indictments against seven Chinese nationals for their involvement in a hacking group that...

• 

  2.3K

  Vulnerabilities

  Chinese Hackers Exploiting Ivanti VPN Flaws to Deploy New Malware

  At least two different suspected China-linked cyber espionage clusters, tracked as UNC5325 and UNC3886, have been attributed to the exploitation of security...

• 

  2.0K

  Malware

  Iranian Hackers Target Middle East Policy Experts with New BASICSTAR Backdoor

  The Iranian-origin threat actor known as Charming Kitten has been linked to a new set of attacks aimed at Middle East policy...

• 

  289

  Malware

  Russian Turla Hackers Target Polish NGOs with New TinyTurla-NG Backdoor

  The Russia-linked threat actor known as Turla has been observed using a new backdoor called TinyTurla-NG as part of a three-month-long campaign...

• 

  1.5K

  Vulnerabilities

  Nation-State Actors Weaponize Ivanti VPN Zero-Days, Deploying 5 Malware Families

  As many as five different malware families were deployed by suspected nation-state actors as part of post-exploitation activities leveraging two zero-day vulnerabilities...

• 

  1.1K

  Malware

  Kimsuky Hackers Deploying AppleSeed, Meterpreter, and TinyNuke in Latest Attacks

  Nation-state actors affiliated to North Korea have been observed using spear-phishing attacks to deliver an assortment of backdoors and tools such as...

• 

  1.6K

  Malware

  New KV-Botnet Targeting Cisco, DrayTek, and Fortinet Devices for Stealthy Attacks

  A new botnet consisting of firewalls and routers from Cisco, DrayTek, Fortinet, and NETGEAR is being used as a covert data transfer...

• 

  3.4K

  Malware

  Researchers Unmask Sandman APT’s Hidden Link to China-Based KEYPLUG Backdoor

  Tactical and targeting overlaps have been discovered between the enigmatic advanced persistent threat (APT) called Sandman and a China-based threat cluster that’s...

• 

  2.1K

  Malware

  Chinese Hackers Using SugarGh0st RAT to Target South Korea and Uzbekistan

  A suspected Chinese-speaking threat actor has been attributed to a malicious campaign that targets the Uzbekistan Ministry of Foreign Affairs and South...

• 

  594

  Malware

  New ‘HrServ.dll’ Web Shell Detected in APT Attack Targeting Afghan Government

  An unspecified government entity in Afghanistan was targeted by a previously undocumented web shell called HrServ in what’s suspected to be an...

• 

  877

  Vulnerabilities

  Experts Uncover DarkCasino: New Emerging APT Threat Exploiting WinRAR Flaw

  A hacking group that leveraged a recently disclosed security flaw in the WinRAR software as a zero-day has now been categorized as...

• 

  1.9K

  Malware

  Researchers Unveil ToddyCat’s New Set of Tools for Data Exfiltration

  The advanced persistent threat (APT) actor known as ToddyCat has been linked to a new set of malicious tools that are designed...

• 

  1.4K

  Malware

  Deadglyph: New Advanced Backdoor with Distinctive Malware Tactics

  Cybersecurity researchers have discovered a previously undocumented advanced backdoor dubbed Deadglyph employed by a threat actor known as Stealth Falcon as part...

• 

  797

  Vulnerabilities

  Norwegian Entities Targeted in Ongoing Attacks Exploiting Ivanti EPMM Vulnerability

  Advanced persistent threat (APT) actors exploited a recently disclosed critical flaw impacting Ivanti Endpoint Manager Mobile (EPMM) as a zero-day since at...

• 

  3.8K

  Malware

  New Zero-Click Hack Targets iOS Users with Stealthy Root-Privilege Malware

  A previously unknown advanced persistent threat (APT) is targeting iOS devices as part of a sophisticated and long-running mobile campaign dubbed Operation...

• 

  4.4K

  Cyber Attack

  Dark Pink APT Group Leverages TelePowerBot and KamiKakaBot in Sophisticated Attacks

  The threat actor known as Dark Pink has been linked to five new attacks aimed at various entities in Belgium, Brunei, Indonesia,...

• 

  2.8K

  Malware

  Meta Uncovers Massive Social Media Cyber Espionage Operations Across South Asia

  Three different threat actors leveraged hundreds of elaborate fictitious personas on Facebook and Instagram to target individuals located in South Asia as...

• 

  3.2K

  Malware

  Chinese Hackers Using MgBot Malware to Target International NGOs in Mainland China

  The advanced persistent threat (APT) group referred to as Evasive Panda has been observed targeting an international non-governmental organization (NGO) in Mainland...

• 

  2.2K

  Cyber Attack

  Winter Vivern APT Targets European Government Entities with Zimbra Vulnerability

  The advanced persistent threat (APT) actor known as Winter Vivern is now targeting officials in Europe and the U.S. as part of...