Mustang Panda (Hive0154), a China-linked threat group, has launched a sophisticated cyber espionage campaign targeting the Tibetan community using culturally relevant spear-phishing emails about Tibet-related topics. The multi-stage attack employs malicious archives, DLL side-loading, PUBL...
SideWinder APT group has expanded its cyberattack campaign to target maritime and logistics companies across Asia, the Middle East, and Africa, while also focusing on nuclear power plants and energy infrastructure. The group has compromised diplomatic entities in multiple countries, includ...
North Korean hacking group Kimsuky has adopted a new social engineering tactic targeting international organizations. Posing as South Korean officials, hackers send spear-phishing emails with PDF attachments that redirect victims to fake registration pages, tricking them into executing mal...
The Mask (Careto) APT group has resurfaced with new cyber espionage campaigns targeting Latin American organizations. Active since 2007, the group employs sophisticated techniques including spear-phishing, zero-day exploits, and custom malware frameworks (Careto2 and Goreto). Recent attack...
A newly discovered cyber campaign targets Thai government officials using a sophisticated backdoor malware called Yokai. The attack leverages DLL side-loading techniques and begins with Thai-language Windows shortcuts masquerading as U.S. Department of Justice documents. Once activated, th...
