The U.S. Department of Justice has charged 12 Chinese nationals in a global cyber espionage campaign involving data theft and dissident suppression. The accused include two Ministry of Public Security officers, eight employees of private firm i-Soon, and two APT27 hackers. This state-spons...
Dark Caracal threat actors are deploying Poco RAT, a sophisticated remote access trojan targeting Spanish-speaking users across Latin America in 2024. The campaign uses finance-themed phishing emails to target organizations in mining, manufacturing, hospitality, and utilities sectors. The ...
Chinese threat actor Lotus Panda (aka Billbug/Bronze Elgin) is targeting government and infrastructure sectors across Southeast Asia with enhanced Sagerunex backdoor variants. Active since 2009, the group has developed new "beta" versions that leverage Dropbox, Twitter, and Zimbra webmail ...
North Korean state-sponsored hacking group Kimsuky (APT43) launches DEEP#DRIVE campaign targeting South Korean business, government, and cryptocurrency sectors. The sophisticated cyber espionage operation uses Korean-language phishing emails with malicious documents, multi-stage PowerShell...
A sophisticated cyber espionage campaign by threat actor REF7707 targeted a South American Foreign Ministry, along with telecommunications and educational institutions in Southeast Asia. The attack utilized custom malware components PATHLOADER and FINALDRAFT, featuring advanced capabilitie...
