APT

Stealth Falcon Exploits New Zero-Day (CVE-2025-33053) in Sophisticated Cyberespionage Campaign

• Cyber Security
• Vulnerability Report

Stealth Falcon Exploits New Zero-Day (CVE-2025-33053) in Sophisticated Cyberespionage Campaign

Do Son June 10, 2025 0

A new cyberespionage campaign attributed to the notorious APT group Stealth Falcon has been uncovered by Check...

Read More Read more about Stealth Falcon Exploits New Zero-Day (CVE-2025-33053) in Sophisticated Cyberespionage Campaign

Librarian Ghouls APT: The Threat Actor Turning Legitimate Tools into a Cybercrime Toolkit

• Cybercriminals

Librarian Ghouls APT: The Threat Actor Turning Legitimate Tools into a Cybercrime Toolkit

Do Son June 10, 2025 0

A stealthy Advanced Persistent Threat (APT) group tracked as Librarian Ghouls—also known by aliases Rare Werewolf and...

Read More Read more about Librarian Ghouls APT: The Threat Actor Turning Legitimate Tools into a Cybercrime Toolkit

Kimsuky’s AppleSeed Returns: North Korea-Linked APT Targets Korean Users via Social Media

• Cyber Security

Kimsuky’s AppleSeed Returns: North Korea-Linked APT Targets Korean Users via Social Media

Do Son June 10, 2025 0

In its latest Advanced Persistent Threat (APT) campaign, Kimsuky, a North Korea-linked group, has returned with an...

Read More Read more about Kimsuky’s AppleSeed Returns: North Korea-Linked APT Targets Korean Users via Social Media

Operation DRAGONCLONE: China Mobile Tietong Hit by Advanced APT Attack

• Cyber Security
• Malware

Operation DRAGONCLONE: China Mobile Tietong Hit by Advanced APT Attack

Do Son June 10, 2025 0

Seqrite Labs APT-Team has uncovered a targeted campaign against China Mobile Tietong Co., Ltd., a prominent subsidiary...

Read More Read more about Operation DRAGONCLONE: China Mobile Tietong Hit by Advanced APT Attack

BladedFeline: Iran-Aligned APT Group Expands Arsenal With Whisper and PrimeCache

• Cyber Security
• Malware

BladedFeline: Iran-Aligned APT Group Expands Arsenal With Whisper and PrimeCache

Do Son June 10, 2025 0

In a detailed expose released by ESET, researchers unveiled a sophisticated and persistent cyberespionage campaign by an...

Read More Read more about BladedFeline: Iran-Aligned APT Group Expands Arsenal With Whisper and PrimeCache

UNC1151 Exploits Roundcube Flaw in Spear Phishing Attack

• Cyber Security
• Vulnerability Report

UNC1151 Exploits Roundcube Flaw in Spear Phishing Attack

Do Son June 9, 2025 0

CERT Polska has sounded the alarm after uncovering a spear phishing campaign that targeted Polish organizations using...

Read More Read more about UNC1151 Exploits Roundcube Flaw in Spear Phishing Attack

TA397’s Global Targeting Tactics Reveal Indian State-Backed Cyber Operations

• Cyber Security

TA397’s Global Targeting Tactics Reveal Indian State-Backed Cyber Operations

Do Son June 7, 2025 0

A new report from Proofpoint Threat Research, in collaboration with Threatray, reveals mounting evidence that TA397 (also...

Read More Read more about TA397’s Global Targeting Tactics Reveal Indian State-Backed Cyber Operations

Kaspersky Report Reveals Growing Threat from Old Exploits and OS Vulnerabilities in Q1 2025

• Vulnerability Report

Kaspersky Report Reveals Growing Threat from Old Exploits and OS Vulnerabilities in Q1 2025

Do Son June 3, 2025 0

Kaspersky’s latest “Exploits and vulnerabilities in Q1 2025” shows that attackers are doubling down on aging exploits,...

Read More Read more about Kaspersky Report Reveals Growing Threat from Old Exploits and OS Vulnerabilities in Q1 2025

PoC Reveals Apple Audio Zero-Day Enabling Remote Code Execution via Malicious Media Files

• Vulnerability

PoC Reveals Apple Audio Zero-Day Enabling Remote Code Execution via Malicious Media Files

Do Son June 2, 2025 0

Apple has patched a high-severity zero-day vulnerability in CoreAudio, the framework responsible for audio playback and processing...

Read More Read more about PoC Reveals Apple Audio Zero-Day Enabling Remote Code Execution via Malicious Media Files

New Cyber Threat: UTG-Q-015 Exploits 0-Days for Espionage in Asia

• Cyber Security

New Cyber Threat: UTG-Q-015 Exploits 0-Days for Espionage in Asia

Do Son May 29, 2025 0

In a threat intelligence report, the Qi’anxin Threat Intelligence Center has exposed a series of highly targeted...

Read More Read more about New Cyber Threat: UTG-Q-015 Exploits 0-Days for Espionage in Asia

Earth Lamia: China-Linked APT Targets Global Industries with Custom Backdoors

• Cyber Security

Earth Lamia: China-Linked APT Targets Global Industries with Custom Backdoors

Do Son May 28, 2025 0

Trend Micro’s latest threat intelligence report uncovers Earth Lamia — a stealthy and evolving China-nexus advanced persistent...

Read More Read more about Earth Lamia: China-Linked APT Targets Global Industries with Custom Backdoors

Decade of Stealth: China-Linked TA-ShadowCricket Targets Asia-Pacific

• Cyber Security
• Malware

Decade of Stealth: China-Linked TA-ShadowCricket Targets Asia-Pacific

Do Son May 26, 2025 0

AhnLab and South Korea’s National Cyber Security Center (NCSC) have released a detailed joint report on a...

Read More Read more about Decade of Stealth: China-Linked TA-ShadowCricket Targets Asia-Pacific

Earth Ammit Strikes Drone Supply Chains: VENOM and TIDRONE Campaigns Expose East Asia’s Critical Infrastructure

• Cyber Security
• Malware

Earth Ammit Strikes Drone Supply Chains: VENOM and TIDRONE Campaigns Expose East Asia’s Critical Infrastructure

Do Son May 14, 2025 0

rend Micro researchers have uncovered the full extent of an elaborate, multi-phase cyber-espionage operation attributed to Earth...

Read More Read more about Earth Ammit Strikes Drone Supply Chains: VENOM and TIDRONE Campaigns Expose East Asia’s Critical Infrastructure

Swan Vector Espionage Targets Japan & Taiwan with Advanced Malware

• Cyber Security
• Malware

Swan Vector Espionage Targets Japan & Taiwan with Advanced Malware

Do Son May 14, 2025 0

The Seqrite Labs APT-Team has uncovered a complex cyber-espionage operation dubbed Swan Vector, targeting educational institutions and...

Read More Read more about Swan Vector Espionage Targets Japan & Taiwan with Advanced Malware

Nebulous Mantis Cyber Espionage Group: RomCom RAT and Hybrid Tactics

• Cybercriminals
• Malware

Nebulous Mantis Cyber Espionage Group: RomCom RAT and Hybrid Tactics

Do Son May 3, 2025 0

A new threat intelligence report by PRODAFT details Nebulous Mantis, a Russian-speaking cyber espionage group operating under...

Read More Read more about Nebulous Mantis Cyber Espionage Group: RomCom RAT and Hybrid Tactics

Earth Kurma APT Targets Southeast Asia with Stealthy Cyberespionage

• Cyber Security
• Malware

Earth Kurma APT Targets Southeast Asia with Stealthy Cyberespionage

Do Son April 29, 2025 0

In a newly released report, Trend Research has unveiled the operations of an advanced persistent threat (APT)...

Read More Read more about Earth Kurma APT Targets Southeast Asia with Stealthy Cyberespionage

North Korean APT ‘Contagious Interview’ Launches Fake Crypto Companies to Spread Malware Trio

• Cybercriminals
• Malware

North Korean APT ‘Contagious Interview’ Launches Fake Crypto Companies to Spread Malware Trio

Do Son April 28, 2025 0

Threat analysts at Silent Push have uncovered a new campaign orchestrated by the North Korean state-sponsored APT...

Read More Read more about North Korean APT ‘Contagious Interview’ Launches Fake Crypto Companies to Spread Malware Trio

Kimsuky’s PebbleDash Campaign: PowerShell Attacks & RDP Bypass Tactics

• Cybercriminals
• Malware

Kimsuky’s PebbleDash Campaign: PowerShell Attacks & RDP Bypass Tactics

Do Son April 25, 2025 0

A recent report by the AhnLab Security intelligence Center (ASEC) has uncovered the latest tactics employed by...

Read More Read more about Kimsuky’s PebbleDash Campaign: PowerShell Attacks & RDP Bypass Tactics

Legitimate Windows Tool Abused: mavinject.exe Used for Stealthy DLL Injection by Threat Actors

• Cybercriminals

Legitimate Windows Tool Abused: mavinject.exe Used for Stealthy DLL Injection by Threat Actors

Do Son April 22, 2025 0

AhnLab Security Emergency Response Center (ASEC) has reported on the abuse of a legitimate Microsoft utility, mavinject.exe,...

Read More Read more about Legitimate Windows Tool Abused: mavinject.exe Used for Stealthy DLL Injection by Threat Actors

Larva-24005: Kimsuky’s Global Cyber Espionage Campaign Exploits RDP and Office Flaws

• Cybercriminals

Larva-24005: Kimsuky’s Global Cyber Espionage Campaign Exploits RDP and Office Flaws

Do Son April 21, 2025 0

A new cybersecurity report from the AhnLab Security intelligence Center (ASEC) has shed light on a recently...

Read More Read more about Larva-24005: Kimsuky’s Global Cyber Espionage Campaign Exploits RDP and Office Flaws

IronHusky APT Resurfaces with Evolved MysterySnail RAT

• Cyber Security
• Malware

IronHusky APT Resurfaces with Evolved MysterySnail RAT

Do Son April 18, 2025 0

In a newly released report, Kaspersky’s Global Research and Analysis Team (GReAT) has revealed the resurgence of...

Read More Read more about IronHusky APT Resurfaces with Evolved MysterySnail RAT

BPFDoor Backdoor Used in Asia, Middle East Cyberespionage

• Cybercriminals
• Malware

BPFDoor Backdoor Used in Asia, Middle East Cyberespionage

Do Son April 16, 2025 0

A recent report by Trend Micro has uncovered a stealthy, state-sponsored backdoor called BPFDoor, which has been...

Read More Read more about BPFDoor Backdoor Used in Asia, Middle East Cyberespionage