Cloud Atlas threat actor launches new cyber attacks using VBCloud malware, targeting multiple countries through phishing emails with malicious Office documents. The attack chain deploys three malware components: VBShower, PowerShower, and VBCloud, focusing on network infiltration, system r...
A South Asian cyber espionage group, Bitter (TA397), targeted a Turkish defense organization using sophisticated malware WmRAT and MiyaRAT. The attack employed complex delivery methods including RAR archives and alternate data streams, initiated through phishing emails. Active since 2013, ...
The Mask (Careto) APT group has resurfaced with new cyber espionage campaigns targeting Latin American organizations. Active since 2007, the group employs sophisticated techniques including spear-phishing, zero-day exploits, and custom malware frameworks (Careto2 and Goreto). Recent attack...
A newly discovered cyber campaign targets Thai government officials using a sophisticated backdoor malware called Yokai. The attack leverages DLL side-loading techniques and begins with Thai-language Windows shortcuts masquerading as U.S. Department of Justice documents. Once activated, th...
Chinese state-linked hackers targeted Southern European IT providers in 'Operation Digital Eye' using Visual Studio Code tunnels as a backdoor. The campaign, discovered between June-July 2024, exploited SQL injection vulnerabilities and leveraged legitimate VSCode installations to maintain...
