Chinese hacking group MirrorFace has conducted extensive cyber espionage operations against Japanese organizations since 2019, targeting sectors including government, technology, and academia. Through three major campaigns, the group deployed sophisticated malware like LODEINFO and ANEL wh...
Cloud Atlas threat actor launches new cyber attacks using VBCloud malware, targeting multiple countries through phishing emails with malicious Office documents. The attack chain deploys three malware components: VBShower, PowerShower, and VBCloud, focusing on network infiltration, system r...
A South Asian cyber espionage group, Bitter (TA397), targeted a Turkish defense organization using sophisticated malware WmRAT and MiyaRAT. The attack employed complex delivery methods including RAR archives and alternate data streams, initiated through phishing emails. Active since 2013, ...
The Mask (Careto) APT group has resurfaced with new cyber espionage campaigns targeting Latin American organizations. Active since 2007, the group employs sophisticated techniques including spear-phishing, zero-day exploits, and custom malware frameworks (Careto2 and Goreto). Recent attack...
A newly discovered cyber campaign targets Thai government officials using a sophisticated backdoor malware called Yokai. The attack leverages DLL side-loading techniques and begins with Thai-language Windows shortcuts masquerading as U.S. Department of Justice documents. Once activated, th...
