CHOSEN BRICK Malware Lets Iranian State Hackers Steal Emails, WhatsApp and Telegram Data
Iranian state-linked hackers are using a Windows malware family called CHOSEN BRICK to spy on dissidents, activists, journalists, and other individuals viewed as threats...
North Korea-Linked Hackers Turn Web Servers Into Stealthy Espionage Backdoors
The campaign targeted organizations in South Korea’s automotive and media sectors, using compromised edge servers to steal credentials, monitor victims, inject malicious content into...
APT28 HOOKEDGE Backdoor Abuses Microsoft Edge and webhook.site for C2 and Data Exfiltration
Russian state-linked threat actor BlueDelta, also known as APT28, Fancy Bear, and Forest Blizzard, has launched phishing campaigns using a lightweight Windows backdoor called...
Fake Resume Targets Chinese Researchers With SNOWLIGHT and Fileless VShell RAT
A malicious Chinese-language resume is targeting academic researchers with SNOWLIGHT shellcode and the VShell remote-access trojan (RAT), using a believable graduate-school application as cover.
The...
Bauman Leak Reveals GRU Training in Malware, Exploitation, Adversary Emulation and Cyber Warfare
Leaked documents indicate that Bauman Moscow State Technical University’s Department No. 4 operated as a long-term training pipeline for Russian military intelligence and cyber...