Sign in Subscribe

Malware

APT-C-00 OceanLotus Utilizes Advanced Dual Loader with VMP Protections

APT-C-00 OceanLotus Utilizes Advanced Dual Loader with VMP Protections

On September 23, 2024, the Advanced Threat Research Institute’s 360 Threat Intelligence Center released a detailed analysis on APT-C-00, also known as OceanLotus, a notorious advanced persistent threat (APT) group with suspected state backing.

Evil Corp: The Cybercrime Syndicate that Refuses to Die

Evil Corp: The Cybercrime Syndicate that Refuses to Die

On October 1, 2024, a detailed report shed new light on the notorious cybercrime group Evil Corp, revealing their continued operations despite global efforts to dismantle their network. Known for creating some of the most sophisticated malware strains.

Russian State-Sponsored Mobile Threats: A Decade of Espionage and Surveillance

Russian State-Sponsored Mobile Threats: A Decade of Espionage and Surveillance

On September 22, 2024, @BushidoToken released a threat intelligence report uncovering a decade of underreported Russian mobile espionage campaigns targeting Android and iOS users.

Global Coalition Expands Efforts to Counter Commercial Spyware Misuse

Global Coalition Expands Efforts to Counter Commercial Spyware Misuse

Austria, Estonia, Lithuania, and the Netherlands officially endorsed the Joint Statement on Efforts to Counter Commercial Spyware.

Raptor Train: Chinese Nation-State Botnet Compromises Over 200,000 Devices

Raptor Train: Chinese Nation-State Botnet Compromises Over 200,000 Devices

Black Lotus Labs released a report detailing the discovery of a botnet, dubbed "Raptor Train." This multi-tiered network has compromised more than 200,000 small office/home office (SOHO) routers, Internet of Things (IoT) devices, and network infrastructure worldwide.

How Ransomhub Ransomware Uses EDRKillShifter to Disable EDR and Antivirus

How Ransomhub Ransomware Uses EDRKillShifter to Disable EDR and Antivirus

On September 20, 2024, Trend Micro released a comprehensive threat report detailing how the Water Bakunawa threat group has employed advanced techniques in the RansomHub ransomware campaign.

Gleaming Pisces Poisoned Python Packages Campaign Delivers PondRAT Linux and MacOS Backdoors

Gleaming Pisces Poisoned Python Packages Campaign Delivers PondRAT Linux and MacOS Backdoors

On September 18, 2024, Unit 42 researchers at Palo Alto Networks released an investigation detailing an ongoing cyber campaign by the North Korean-linked threat actor group known as Gleaming Pisces (aka Citrine Sleet).