Compromised ConnectWise app credentials enabled ARTEX-assisted Microsoft 365 intrusions
Compromised ConnectWise app credentials enabled ARTEX-assisted Microsoft 365 intrusions
APT
More news
Page 1 / 9 · 79 articles
Sandworm wiped Ukrainian logistics company after another group gained access
ESET describes UAC-0099 phishing access to a Ukrainian logistics firm, MythicRatatoskr backdoor via Yggdrasil, and later Sandworm wiping.
Lazarus FlashHole Campaign Uses Post-Quantum Key Exchange to Hide Malware Delivery
Kaspersky reports FlashHole, attributed to Lazarus, uses phishing, in-memory loaders and ML-KEM key exchange to hide malware delivery per BleepingComputer
Symantec Links APT28 to Espionage at European Defense and Law-Enforcement Targets
Symantec attributes espionage activity against European defense and law-enforcement targets to APT28, with data theft unconfirmed.
Court Keeps Former OpenAI Engineer Detained Over Alleged Covert Recordings
US court ordered ex-OpenAI engineer Abdulrahman Alfozan detained pending trial over alleged hidden recorders in offices, prosecutors say.
Fortinet flaws enabled telecom intrusion and memory-resident PeerStitch implant
Palo Alto Networks reports suspected state-backed UNC5820 exploited Fortinet flaws to breach FortiManager and deploy in-memory PeerStitch on FortiGate.
US Charges 14 in North Korean Remote-Worker Scheme Targeting American Companies
US charged 14 in alleged North Korean IT worker scheme using laptop farms to pose as US employees for revenue, DOJ says.
UAT-11985 Relays Google Logins Through Fake Invitations Targeting Taiwan Researchers
UAT-11985 uses fake event invites and spoofed Google login pages to relay credentials and MFA prompts targeting Taiwan researchers.
FBI Seizes Seven Domains Supporting Flax Typhoon Scanning and Malware Operations
FBI seized domains allegedly supporting MicroScan and FishHub scanning and malware platforms attributed to China-linked Flax Typhoon operators.