Chinese state-sponsored hackers from the TA415 group conducted a sophisticated spear-phishing campaign targeting US government officials, think tanks, and academic institutions during July-August 2025. The attackers impersonated US-China trade committee representatives and business council...
Iranian state-sponsored hackers linked to the IRGC have launched sophisticated spear-phishing attacks targeting Israeli cybersecurity professionals, journalists, and academics. The "Educated Manticore" group, connected to APT35/APT42, uses fake personas to build trust before directing vict...
Russian threat actor TAG-110 has shifted tactics in a new spear-phishing campaign targeting Tajikistan's government, educational, and research institutions. Instead of using their traditional HATVIBE loader, the group now deploys macro-enabled Word templates that establish persistence, con...
North Korean hacking group Kimsuky launches sophisticated phishing campaign using new forceCopy malware to steal browser data and credentials. The attack uses deceptive LNK files, multiple malicious tools including PEBBLEDASH trojan, modified RDP Wrapper, and custom proxy malware. This rep...
Critical 7-Zip vulnerability (CVE-2025-0411) exploited by Russian threat actors to deliver SmokeLoader malware to Ukrainian organizations through sophisticated spear-phishing campaigns, affecting government and infrastructure targets. The flaw bypasses Windows' mark-of-the-web security, wi...
