Security News

Sandworm APT’s initial access subgroup hits organizations accross the globe
2025-02-13 13:25

A subgroup of Russia’s Sandworm APT has been working to achieve initial and persistent access to the IT networks of organizations working in economic sectors Russia is interested in. “In 2022, its...

North Korean APT Kimsuky Uses forceCopy Malware to Steal Browser-Stored Credentials
2025-02-06 11:05

The North Korea-linked nation-state hacking group known as Kimsuky has been observed conducting spear-phishing attacks to deliver an information stealer malware named forceCopy, according to new...

PlushDaemon APT Targets South Korean VPN Provider in Supply Chain Attack
2025-01-22 08:49

A previously undocumented China-aligned advanced persistent threat (APT) group named PlushDaemon has been linked to a supply chain attack targeting a South Korean virtual private network (VPN)...

China-aligned PlushDaemon APT compromises supply chain of Korean VPN
2025-01-22 06:00

ESET researchers have uncovered a supply chain attack targeting a South Korean VPN provider, carried out by PlushDaemon, a newly identified China-aligned APT group. In this cyberespionage...

Chinese APT Exploits BeyondTrust API Key to Access U.S. Treasury Systems and Documents
2024-12-31 05:42

The United States Treasury Department said it suffered a "major cybersecurity incident" that allowed suspected Chinese threat actors to remotely access some computers and unclassified documents. ...

Bitter APT Targets Turkish Defense Sector with WmRAT and MiyaRAT Malware
2024-12-17 11:07

A suspected South Asian cyber espionage threat group known as Bitter targeted a Turkish defense sector organization in November 2024 to deliver two C++-malware families tracked as WmRAT and...

The Mask APT Resurfaces with Sophisticated Multi-Platform Malware Arsenal
2024-12-17 06:55

A little-known cyber espionage actor known as The Mask has been linked to a new set of attacks targeting an unnamed organization in Latin America twice in 2019 and 2022. "The Mask APT is a...

Researchers Uncover Espionage Tactics of China-Based APT Groups in Southeast Asia
2024-12-11 11:00

A suspected China-based threat actor has been linked to a series of cyber attacks targeting high-profile organizations in Southeast Asia since at least October 2023. The espionage campaign...

APT-C-60 Hackers Exploit StatCounter and Bitbucket in SpyGlace Malware Campaign
2024-11-27 11:14

The threat actor known as APT-C-60 has been linked to a cyber attack targeting an unnamed organization in Japan that used a job application-themed lure to deliver the SpyGlace backdoor. That's...

APT-K-47 Uses Hajj-Themed Lures to Deliver Advanced Asyncshell Malware
2024-11-22 16:59

The threat actor known as Mysterious Elephant has been observed using an advanced version of malware called Asynshell. The attack campaign is said to have used Hajj-themed lures to trick victims...