FBI Seizes Seven Domains Supporting Flax Typhoon Scanning and Malware Operations
FBI seized domains allegedly supporting MicroScan and FishHub scanning and malware platforms attributed to China-linked Flax Typhoon operators.
APT
More news
Page 1 / 8 · 71 articles
MatchBoil’s Two-Minute Check-Ins Expand Access Risks for Ukrainian Infrastructure
ESET reports UAC-0099 uses phishing-delivered MatchBoil to deploy MatchWok backdoor in Ukraine transport, manufacturing and energy sectors.
Zhang Yu Targeted by $10 Million US Reward Offer Over HAFNIUM Allegations
US offers up to $10M for information on Zhang Yu, charged over alleged Chinese intelligence-linked hacking including COVID research and Exchange activity.
TA419 Uses Deceptive Microsoft Login Flows to Pursue U.S. AI Policy Specialists
Proofpoint links China-aligned TA419 to phishing attacks on US AI policy experts using fake Microsoft logins to steal credentials.
MI5 Tells UK Universities to Trace Research Funding Linked to Alleged Chinese Intelligence Front
MI5 warned UK universities that 100+ academics received funding via CGTRI, alleged MSS front backing AI, cybersecurity and covert comms research.
Antino Hides Espionage Traffic Inside Outlook and OneDrive
UAT-11587 used Antino backdoor to target Asian government agencies, hiding C2 in Outlook and OneDrive via Microsoft Graph.
Mabna Institute Case Brings Alleged University-Hacking Suspect to the United States
Amir Barati extradited from Montenegro to US over alleged Mabna Institute spearphishing campaign stealing university research for IRGC.
RedFlick Reduces Victim Interaction in Star Blizzard’s Espionage Phishing Campaigns
Star Blizzard uses RedFlick to deliver CosmicPulse backdoor with one click, targeting Ukraine, NGOs and think tanks in espionage phishing campaigns.
NeedyMantis Gives Intruders a Modular Backdoor After the Initial Breach
Microsoft details NeedyMantis, a modular post-breach backdoor using DLL sideloading and encrypted WebSocket C2 to retain control in targeted intrusions.