North Korea Uses GitHub in Diplomat Cyber Attacks as IT Worker Scheme Hits 320+ Firms
North Korean group Kimsuky used spear-phishing, cloud storage, and GitHub-based command-and-control to deploy Xeno RAT against South Korean diplomatic missions March–July 2025.
Noodlophile Malware Campaign Expands Global Reach with Copyright Phishing Lures
The Noodlophile campaign, active for over a year, now leverages advanced spear-phishing emails posing as copyright infringement notices, tailored with reconnaissance-derived details like specific Facebook Page IDs and company ownership information.
Chinese Hackers Deploy MarsSnake Backdoor in Multi-Year Attack on Saudi Organization
Threat actor UnsolicitedBooker targets international organizations with a backdoor named MarsSnake, using spear-phishing tactics involving flight tickets.
Malware Attack Targets World Uyghur Congress Leaders via Trojanized UyghurEdit++ Tool
"Although the malware itself was not particularly advanced, the delivery of the malware was extremely well customized to reach the target population..."