#cyber-espionage
#cyber-espionage
[ follow ]
#cybersecurity #malware #china #telecommunications #lazarus-group #network-security #salt-typhoon #threat-actors
fromThe Hacker News
21 hours agoNorth Korean Hackers Lure Defense Engineers With Fake Jobs to Steal Drone Secrets
Some of these [companies' are heavily involved in the unmanned aerial vehicle (UAV) sector, suggesting that the operation may be linked to North Korea's current efforts to scale up its drone program," ESET security researchers Peter Kálnai and Alexis Rapin said in a report shared with The Hacker News. It's assessed that the end goal of the campaign is to plunder proprietary information and manufacturing know-how using malware families such as ScoringMathTea and MISTPEN.
Information security
fromThe Hacker News
2 days agoResearchers Identify PassiveNeuron APT Using Neursite and NeuralExecutor Malware
The cyber espionage activity was first flagged by the Russian cybersecurity vendor in November 2024, when it disclosed a set of attacks aimed at government entities in Latin America and East Asia in June, using never-before-seen malware families tracked as Neursite and NeuralExecutor. It also described the operation as exhibiting a high level of sophistication, with the threat actors leveraging already compromised internal servers as an intermediate command-and-control (C2) infrastructure to fly under the radar.
Information security
Information security
fromThe Hacker News
4 weeks agoUNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors
A suspected China-nexus cyber espionage group used the BRICKSTORM backdoor to maintain long-term access to U.S. legal, SaaS, BPO, and technology organizations and steal data.
Information security
fromThe Hacker News
1 month agoResearchers Warn of MystRodX Backdoor Using DNS and ICMP Triggers for Stealthy Control
MystRodX is a stealthy, flexible C++ backdoor that uses layered encryption, passive wake-up triggers via DNS/ICMP, and modular capabilities for remote control and data capture.
Information security
fromThe Hacker News
1 month agoAmazon Disrupts APT29 Watering Hole Campaign Abusing Microsoft Device Code Authentication
Russia-linked APT29 ran a watering hole campaign redirecting visitors to attacker-controlled domains to trick users into authorizing devices via Microsoft's device code authentication flow.
fromThe Hacker News
3 months agoFire Ant Exploits VMware Flaws to Compromise ESXi Hosts and vCenter Environments
The threat actor leveraged combinations of sophisticated and stealthy techniques creating multilayered attack kill chains to facilitate access to restricted and segmented network assets within presumed to be isolated environments.
Information security
fromSecuritymagazine
3 months agoThreat Actor Targeting Indian Defense Sector
APT36's focus on Linux-specific systems, particularly those used in government infrastructure, reinforces that no operating system is off-limits to nation-state attackers. This kind of multi-layered phishing attack highlights how threat actors are constantly evolving their tactics to quietly bypass defenses and exploit user trust.
Privacy professionals
[ Load more ]