campaigns
-
Deceptive Excel Lures: How Kimsuky APT Leverages LNK Files and Cloud Services to Target Life Sciences
In a sophisticated display of social engineering and technical evasion, North Korean state-backed actors are increasingly deploying weaponized, Excel-themed files…
Read More » -
Analyzing a New PowerShell-Based Telegram Session Stealer: From Pastebin to Bot API Exfiltration
Threat actors are currently refining a specialized class of infostealers specifically designed to hijack Telegram sessions. Unlike broad-spectrum malware that…
Read More » -
The Invisible Shadow: How Signaling Vulnerabilities Enable Global Mobile Surveillance
A groundbreaking investigation by Citizen Lab has pulled back the curtain on a series of sophisticated, multi-year surveillance campaigns that…
Read More » -
NCSC-UK Warns of China-Linked Covert Networks Using Hijacked IoT Devices
The UK’s National Cyber Security Centre (NCSC), along with international partners, has issued a joint warning about a growing trend…
Read More » -
Harvester APT Deploys Linux Variant of GoGra Backdoor via Microsoft Graph API, Outlook Mailboxes
In a significant pivot for cyber espionage tactics, security researchers have uncovered a Linux-compatible variant of the GoGra backdoor. This…
Read More » -
Google Ads Weaponized for Crypto Theft
The traditional security perimeter is shifting. Malicious actors are increasingly bypassing technical firewalls by exploiting the one thing users trust…
Read More » -
The Trojan Candidate: How Jasper Sleet Infiltrates Cloud Environments via Remote Hiring Exploits
In a sophisticated evolution of social engineering, Microsoft has issued a critical warning regarding Jasper Sleet, a North Korea-aligned threat…
Read More » -
Analyzing DinDoor, the Deno-Powered Backdoor Disguised as Legitimate Tooling
In the evolving landscape of advanced persistent threats (APTs), attackers are increasingly moving away from custom compiled binaries in favor…
Read More » -
Over 1,300 SharePoint Servers Remain Vulnerable to Active Spoofing Exploits
In what is becoming a stark case study in patch management latency, more than 1,370 Microsoft SharePoint servers remain exposed…
Read More » -
Critical Infrastructure Breach: Compromise of France’s ANTS National Identity Portal
In a significant blow to national digital sovereignty, the French National Agency for Secure Documents (ANTS) has confirmed a major…
Read More » -
LOTUSLITE: How Mustang Panda is Weaponizing Trusted Binaries Against the Banking Sector
In a sophisticated display of “living off the land” tradecraft, threat actors are increasingly leveraging Microsoft-signed developer tools to mask…
Read More » -
The Rise of GenAI-Assisted NFC Relays: Analyzing the New NGate Malware Campaign
Cybersecurity researchers have identified a sophisticated new evolution in the NGate malware family. In this latest iteration, threat actors are…
Read More » -
The Trojan Horse in Your Inbox: How Attackers Are Weaponizing GitHub Issue Notifications
In a sophisticated evolution of social engineering, threat actors are no longer just sending fake emails; they are hijacking the…
Read More » -
Notion Data Leak Exposes Editor Email Addresses Without Authentication
Security researchers have confirmed that any public Notion page now leaks the full names, email addresses, and profile pictures of…
Read More » -
Email-Borne Worm Surge Targets Industrial Systems as Overall Malware Declines
While malware activity on industrial control systems (ICS) networks shows gradual decline, email-borne worms are driving a new wave of…
Read More » -
TP-Link Routers Under Attack: Mirai Exploitation via Critical Vulnerability
Active scanning campaigns are targeting vulnerable TP-Link home routers to deploy Mirai-style malware, exploiting the CVE-2023-33538 vulnerability in a new…
Read More »