Sign in Subscribe

APT

Operation Oxidový: Czech Military Targeted by NATO-Themed Malware Campaign

Operation Oxidový: Czech Military Targeted by NATO-Themed Malware Campaign

a sophisticated malware campaign targeting the Czech Republic's government and military officials. Known as "Operation Oxidový," the campaign leverages NATO-themed decoys to infiltrate and compromise sensitive systems.

Iranian Counterintelligence Operation Targets Farsi Speakers with Fake Recruitment Websites

Iranian Counterintelligence Operation Targets Farsi Speakers with Fake Recruitment Websites

On August 28, 2024, Mandiant released a comprehensive report uncovering a suspected Iran-nexus counterintelligence operation. This campaign, targeting Farsi speakers within and outside Iran, leveraged fake recruitment websites to collect personal and professional data.

Iran-Based Cyber Actors Enabling Ransomware Attacks on US Organizations

Iran-Based Cyber Actors Enabling Ransomware Attacks on US Organizations

Iran-based cyber actors are believed to be affiliated with the Government of Iran (GOI), have been conducting cyber intrusions targeting US organizations.

Advanced Persistent Threat Targets Vietnamese Human Rights Defenders with Sophisticated Malware Campaign

Advanced Persistent Threat Targets Vietnamese Human Rights Defenders with Sophisticated Malware Campaign

On August 28, 2024, cybersecurity firm Huntress released a detailed report uncovering a prolonged and sophisticated cyber espionage campaign targeting Vietnamese human rights defenders. The intrusion, believed to have been ongoing for at least four years

ESET Uncovers Two Critical Code Execution Vulnerabilities in WPS Office, Exploited by APT-C-60

ESET Uncovers Two Critical Code Execution Vulnerabilities in WPS Office, Exploited by APT-C-60

South Korea-aligned cyber espionage group APT-C-60 has exploited these vulnerabilities to target individuals in East Asian countries. ESET's research has uncovered the technical nuances of these exploits

WhatsApp Blocks Iranian Threat Actor APT42 in Targeted Phishing Campaign

WhatsApp Blocks Iranian Threat Actor APT42 in Targeted Phishing Campaign

On August 23, 2024, Meta's security team released a brief report detailing the disruption of a small cluster of malicious WhatsApp accounts linked to APT42, an Iranian threat actor notorious for phishing campaigns.

Velvet Ant Threat Group Exploits Zero-Day Vulnerability in Cisco Nexus Switches to Deploy Malware

Velvet Ant Threat Group Exploits Zero-Day Vulnerability in Cisco Nexus Switches to Deploy Malware

On August 22, 2024, Sygnia released a detailed report uncovering a sophisticated cyber espionage campaign conducted by the China-nexus threat group "Velvet Ant." This group recently exploited a zero-day vulnerability (CVE-2024-20399) in Cisco Nexus Switch appliances