APT

APT

One Exploit Operator, Three Technology Stacks and Thousands of Exposed Government Records

Chinese-linked actor exploited WordPress, Zyxel and UniFi flaws to breach government networks, stealing 18,566 records and compromising 996 devices.

Sep 23, 202607:45 6 min readRead →

APT

Fake Coding Tests Give North Korean Operators a Foothold on 30,000 Devices

North Korea's Contagious Interview used fake coding tests to compromise 30,000 devices and 7,000 crypto wallets, causing $10.71M in losses.

Sep 22, 202607:39 6 min readRead →

APT

North Korean Hackers Turn Terraform Job Tests Into a Path Toward Developer Networks

Jade Sleet breached an Indian IT firm via fake Terraform job tests, deploying FLATROOF and ROOFDECK macOS backdoors to steal credentials.

Sep 21, 202607:49 6 min readRead →

APT

Handala Hack Turns Telegram Into a Control Channel for Windows Espionage

HEAVYGRAM uses Telegram bots to control Windows systems, steal credentials, capture data, evade Defender, and deploy further malware.

Sep 20, 202611:58 6 min readRead →

APT

WaterPlum Turns Fake Job Interviews Into a Gateway for Crypto Theft and Corporate Intrusion

North Korea-linked WaterPlum used fake job interviews to infect 30,000 devices, steal $10.5M in crypto and gain access to corporate networks.

Sep 19, 202607:53 6 min readRead →

APT

Operation RapidRust Turns Private GitHub Repositories Into an Espionage Control Channel

Transparent Tribe uses Rust backdoor RUSTYSHADE and file stealers via private GitHub repos to spy on Indian and Afghan government targets.

Sep 19, 202603:23 6 min readRead →

APT

SparroWocky Backdoor Gives FamousSparrow a Stealthier Foothold in Latin American Governments

China-linked FamousSparrow deployed SparroWocky backdoor against Latin American governments for espionage, using DLL sideloading and stealth techniques.

Sep 17, 202611:56 7 min readRead →

APT

CHOSEN BRICK Turns Trusted Chats Into a Surveillance Channel for Iranian Operators

US, UK and Dutch agencies expose CHOSEN BRICK, Iranian Windows malware spreading via WhatsApp and Telegram to spy on dissidents, journalists and activists.

Sep 16, 202623:58 7 min readRead →

APT

NightEagle, Hacking Cat, and Toy Ghouls Target Russian Networks

Kaspersky reports NightEagle, Hacking Cat and Toy Ghouls targeting Russian firms with Exchange exploits, backdoors, ransomware and wipers.

Sep 16, 202619:43 7 min readRead →