Latest Cyber-espionage news

StrongPity hackers target Android users via trojanized Telegram app

The StrongPity APT hacking group is distributing a fake Shagle chat app that is a trojanized version of the Telegram for Android app with an added backdoor.
- Bill Toulas
- January 10, 2023
- 10:30 AM
- 0
Ukrainian govt networks breached via trojanized Windows 10 installers

Ukrainian government entities were hacked in targeted attacks after their networks were first compromised via trojanized ISO files posing as legitimate Windows 10 installers.
- Sergiu Gatlan
- December 15, 2022
- 12:24 PM
- 6
Chinese hackers use Google Drive to drop malware on govt networks

State-backed Chinese hackers launched a spearphishing campaign to deliver custom malware stored in Google Drive to government, research, and academic organizations worldwide.
- Bill Toulas
- November 18, 2022
- 10:24 AM
- 0
Chinese hackers target government agencies and defense orgs

The Chinese espionage APT (advanced persistent threat), tracked as 'Billbug' (aka Thrip, or Lotus Blossom), is currently running a 2022 campaign targeting government agencies and defense organizations in multiple Asian countries.
- Bill Toulas
- November 15, 2022
- 06:00 AM
- 0
Worok hackers hide new malware in PNGs using steganography

A threat group tracked as 'Worok' hides malware within PNG images to infect victims' machines with information-stealing malware without raising alarms.
- Bill Toulas
- November 10, 2022
- 02:17 PM
- 1
Hackers compromised Hong Kong govt agency network for a year

Researchers at Symantec have uncovered cyberattacks attributed to the China-linked espionage actor APT41 (a.k.a. Winnti) that breached government agencies in Hong Kong and remained undetected for a year in some cases.
- Bill Toulas
- October 18, 2022
- 06:00 AM
- 0
Microsoft: Lazarus hackers are weaponizing open-source software

Microsoft says the North Korean-sponsored Lazarus threat group is trojanizing legitimate open-source software and using it to backdoor organizations in many industry sectors, such as technology, defense, and media entertainment.
- Sergiu Gatlan
- September 29, 2022
- 01:33 PM
- 0
New hacking group ‘Metador’ lurking in ISP networks for months

A previously unknown threat actor that researchers have named 'Metador' has been breaching telecommunications, internet services providers (ISPs), and universities for about two years.
- Bill Toulas
- September 25, 2022
- 10:16 AM
- 0
Russian hackers use new info stealer malware against Ukrainian orgs

Russian hackers have been targeting Ukrainian entities with previously unseen info-stealing malware during a new espionage campaign that is still active.
- Ionut Ilascu
- September 15, 2022
- 10:38 AM
- 0
Cyberspies drop new infostealer malware on govt networks in Asia

Security researchers have identified new cyber-espionage activity focusing on government entities in Asia, as well as state-owned aerospace and defense firms, telecom companies, and IT organizations.
- Bill Toulas
- September 13, 2022
- 06:00 AM
- 0
New Worok cyber-espionage group targets governments, high-profile firms

A newly discovered cyber-espionage group has been hacking governments and high-profile companies in Asia since at least 2020 using a combination of custom and existing malicious tools.
- Sergiu Gatlan
- September 06, 2022
- 08:49 AM
- 0
Chinese hackers target Australian govt with ScanBox malware

China-based threat actors have been targeting Australian government agencies and wind turbine fleets in the South China Sea by directing select individuals to a fake impersonating an Australian news media outlet.
- Bill Toulas
- August 30, 2022
- 01:26 PM
- 0
Hackers install Dracarys Android malware using modified Signal app

Researchers have discovered more details on the newly discovered Android spyware 'Dracarys,' used by the Bitter APT group in cyberespionage operations targeting users from New Zealand, India, Pakistan, and the United Kingdom.
- Bill Toulas
- August 09, 2022
- 10:02 AM
- 0
Chinese hackers use new Windows malware to backdoor govt, defense orgs

An extensive series of attacks detected in January used new Windows malware to backdoor government entities and organizations in the defense industry from several countries in Eastern Europe.
- Sergiu Gatlan
- August 08, 2022
- 09:36 AM
- 0
Facebook finds new Android malware used by APT hackers

Meta (Facebook) has released its Q2 2022 adversarial threat report, and among the highlights is the discovery of two cyber-espionage clusters connected to hacker groups known as 'Bitter APT' and APT36 (aka 'Transparent Tribe') using new Android malware.
- Bill Toulas
- August 05, 2022
- 10:40 AM
- 0
Cyberspies use Google Chrome extension to steal emails undetected

A North Korean-backed threat group tracked as Kimsuky is using a malicious browser extension to steal emails from Google Chrome or Microsoft Edge users reading their webmail.
- Sergiu Gatlan
- July 28, 2022
- 11:10 AM
- 0
Belgium says Chinese hackers attacked its Ministry of Defense

The Minister for Foreign Affairs of Belgium says multiple Chinese state-backed threat groups targeted the country's defense and interior ministries.
- Sergiu Gatlan
- July 19, 2022
- 10:44 AM
- 0
Microsoft Exchange bug abused to hack building automation systems

A Chinese-speaking threat actor has hacked into the building automation systems (used to control HVAC, fire, and security functions) of several Asian organizations to backdoor their networks and gain access to more secured areas in their networks.
- Sergiu Gatlan
- June 27, 2022
- 11:39 AM
- 0
Microsoft: Russia stepped up cyberattacks against Ukraine’s allies

Microsoft said today that Russian intelligence agencies have stepped up cyberattacks against governments of countries that have allied themselves with Ukraine after Russia's invasion.
- Sergiu Gatlan
- June 22, 2022
- 01:59 PM
- 3
Chinese hacking group Aoqin Dragon quietly spied orgs for a decade

A previously unknown Chinese-speaking threat actor has been uncovered by threat analysts SentinelLabs who were able to link it to malicious activity going as far back as 2013.
- Bill Toulas
- June 09, 2022
- 07:00 AM
- 0