North Korean hackers are targeting Web3 and cryptocurrency companies with sophisticated Nim-based malware called NimDoor, featuring advanced process injection and encrypted communications. The attacks use social engineering through fake Zoom meetings and malicious SDK updates to deploy mul...
Chinese hacking group Silver Fox is targeting Chinese-speaking users through fake software distribution websites that mimic legitimate platforms for popular applications like WPS Office and Sogou. The sophisticated campaign uses malicious MSI installers to deploy Sainbox RAT (a Gh0st RAT v...
Cybersecurity researchers have discovered the OneClik campaign, a sophisticated attack targeting energy, oil, and gas organizations using Microsoft's ClickOnce technology. The campaign, linked to Chinese-affiliated threat actors, employs phishing emails with fake hardware analysis websites...
Iranian state-sponsored hackers linked to the IRGC have launched sophisticated spear-phishing attacks targeting Israeli cybersecurity professionals, journalists, and academics. The "Educated Manticore" group, connected to APT35/APT42, uses fake personas to build trust before directing vict...
North Korean state-backed hackers have deployed NimDoor, a sophisticated new macOS malware targeting cryptocurrency and web3 organizations through social engineering tactics disguised as Zoom SDK updates. The malware features an innovative signal-based persistence mechanism that automatica...
