Russian hackers linked to GRU are targeting Ukrainian military personnel with a malicious version of the Army+ app, using Cloudflare Workers to distribute malware. The attack, discovered by CERT-UA, deploys PowerShell scripts that enable unauthorized remote access through OpenSSH installat...
Russian state-sponsored hacking group Secret Blizzard (Turla) targets Ukrainian military systems using hijacked Amadey malware infrastructure to deploy the Kazuar backdoor. The multi-stage attack campaign, observed between March-April 2024, involves sophisticated techniques including DLL s...
Russian state-linked hackers conduct sophisticated phishing attacks against Ukrainian defense sector, using fake conference invites to deploy malware for stealing credentials and accessing military systems. The campaign, attributed to UAC-0185/UNC4221, targets battlefield intelligence and ...
Russian cyber-espionage group Turla infiltrated Pakistani threat actor Storm-0156's infrastructure to conduct covert attacks on Afghan and Indian government targets, leveraging multiple malware tools and stolen credentials to gather intelligence while avoiding direct attribution. The opera...
Title: Russian-Linked Cyber Espionage Operation (TAG-110)...
