Researchers discovered a sophisticated malware operation using SourceForge to distribute cryptocurrency miners and clipper malware disguised as cracked Microsoft Office applications. The attackers created a legitimate-looking "officepackage" project that redirects Russian-speaking users th...
Russian threat actors Head Mare and Twelve have likely merged operations to target Russian organizations, according to Kaspersky research. Head Mare exploits vulnerabilities in WinRAR, Microsoft Exchange, and uses phishing emails for initial access. Their expanded toolkit includes the CobI...
Russian state-sponsored Gamaredon group expands operations with two new Android spyware tools, BoneSpy and PlainGnome, targeting Russian-speaking populations in former Soviet states. The malware, distributed through disguised legitimate apps, collects sensitive data including SMS, calls, p...
