Cyber Espionage, Confucius targets Pakistan via Android spyware
Lookout cybersecurity experts: The pro-India APT is using two malware: Hornbill and SunBird, delivered as fake apps.
Cyber Espionage, Muddy Water targets UAE and Kuwait with ScreenConnect
Anomali cybersecurity experts: Iran’s APT exploits 2 lures: a report on relations between Arab countries and Israel, or a file on scholarships.
Cyber Espionage, North Korea’s hackers target cybersecurity researchers
Google Threat Analysis Group: They use multiple platforms to communicate, a blog as a lure, and a novel social engineering technique.
Cyber Espionage, new Android spyware in Iran disguised as students app
The cybersecurity researcher bl4ckh0l3z: It steals a lot of info. The malware is part of the ongoing Domestic Kitten internal operation.
Cybersecurity: logic bug for Signal, Duo, Facebook Messenger, JioChat and Mocha
Natalie Silvanovich: The majority of video conferencing apps are implemented using WebRTC. A vulnerability let attackers spy on users.
Cyber Espionage, US CISA: Disconnect or power down SolarWinds Orion products now!
The cybersecurity experts underline that this is is the only known mitigation measure currently available.
Cyber Espionage: APT actors are targeting U.S. Think Tanks
FBI and CISA cybersecurity experts: malicious hackers are trying steal sensitive information, acquire user credentials, and gain persistent access to victim networks.
Cyber Espionage: BISMUTH is leveraging Monero crypto-miners
Microsoft cybersecurity experts: The goal is to stay under the radar and establish persistence in targeted networks. The APT attacked France and Vietnam.
Cyber Espionage, APT10 use ZeroLogon flaw against Japan organizations
Symantec cybersecurity experts: The Chinese state-sponsored group leverages living-off-the-land tools and custom malware, as Backdoor.Hartip, to spy victims.
Cyber Espionage, Kimsuky North Korea’s hackers exposed
US CISA, FBI, and CNMF cybersecurity experts: APT employs common social engineering tactics, spearphishing, and watering hole attacks to exfiltrate information.