Security News

DHS, FBI Warn of Ongoing APT Attack Against Critical Infrastructure
2017-10-23 13:58

The Department of Homeland Security and Federal Bureau of Investigation have issued a joint technical alert warning that government entities and organizations in the energy, nuclear, water,...

Adobe Patches Flash Zero Day Exploited by Black Oasis APT
2017-10-16 15:46

Adobe today released an out-of-band Flash Player update addressing a zero-day vulnerability being exploited by a little-known Middle Eastern APT group called Black Oasis.

Costin Raiu and Juan Andres Guerrero-Saade on APT Fourth-Party Collection
2017-10-04 15:00

Costin Raiu and Juan Andres Guerrero-Saade talk to Mike Mimoso live from Virus Bulletin in Madrid about APTs leveraging one anothers' attacks and compromised machines as their own.

DDoS Attacks More Likely to Hit Critical Infrastructure Than APTs: Europol
2017-09-27 18:07

While critical infrastructure has been targeted by sophisticated threat actors, attacks that rely on commonly available and easy-to-use tools are more likely to occur, said Europol in its 2017...

Turla APT Used WhiteBear Espionage Tools Against Defense Industry, Embassies (Threatpost)
2017-08-30 19:18

The Turla APT's WhiteBear toolset was used to attack defense organizations as recently as June, and diplomatic targets in Europe, Asia and South America during most of 2016.

Kaspersky Details APT Trends for Q2 2017 (Security Week)
2017-08-10 17:51

While continuing to deploy their usual set of hacking tools onto compromised systems, advanced persistent threat (APT) actors were observed using leveraging zero-day vulnerabilities and quickly...

Updates to Sofacy, Turla Highlight 2017 Q2 APT Activity (Threatpost)
2017-08-08 20:34

Attackers behind APT campaigns have kept busy in Q2 2017, adding new ways to bypass detection, crafting new payloads to drop, and identifying new zero days and backdoors to help them infect users...

APT Group Uses Catfish Technique To Ensnare Victims (Threatpost)
2017-07-27 14:00

APT Cobalt Gypsy or OilRig, used a fake persona called "Mia Ash" to ensnare tech-savvy workers in the oil and gas industry into downloading PupyRAT malware.

'DarkHotel' APT Uses New Methods to Target Politicians (Security Week)
2017-07-19 16:06

The DarkHotel threat group has been using some new methods in attacks aimed at government employees with an interest in North Korea, according to a report published this week by security firm...

Researchers Find BlackEnergy APT Links in ExPetr Code (Threatpost)
2017-07-03 18:31

Researchers have found links between the BlackEnergy APT group and threat actors behind the ExPetr malware used in last month’s global attacks.