Do Son
At a glance Actor / group UAT-11795 (suspected Russian-speaking, financially motivated) Activity type Credential and cryptocurrency theft...
Cryptocurrency Theft
North Korea-aligned threat actors are updating their malicious toolsets to target software developers globally. Specifically, TrendAI Research...
A routine investigation into a low-detection installer has blown the doors off a highly organized, financially motivated...
A 24-year-old Dundee man has admitted his role in a sophisticated international cybercrime ring that utilized SMS...
In the world of network administration and secure development, specialized tools like “proxifiers” are essential for tunneling...
Security researchers at Zscaler ThreatLabz have unmasked a sophisticated new command-and-control (C2) framework implant they’ve dubbed SnappyClient....
The eSentire’s Threat Response Unit (TRU) recently uncovered a sophisticated campaign involving a Remote Access Trojan (RAT)...
Mac users are the target of a convincing new “brand impersonation” campaign that turns the popular utility...
A notorious North Korean cyber espionage campaign targeting the tech sector has evolved with a dangerous new...
North Korean threat actors are leveling up their social engineering game, using AI-generated deepfakes and sophisticated malware...
One of North Korea’s most aggressive cyber units has undergone a major strategic evolution, splitting into three...
A sophisticated new malware campaign is targeting macOS users with a lethal combination of social engineering and...
A sophisticated new cybercrime operation is preying on the trust of the cryptocurrency community by masquerading as...
The open-source ecosystem has once again been weaponized, this time targeting developers working with cryptocurrency libraries. In...
A new, sophisticated malware campaign is sweeping across the internet, leveraging a recently disclosed vulnerability to install...
A sophisticated supply chain campaign targeting .NET developers working with cryptocurrency has been uncovered, revealing a network...
A new macOS stealer campaign—internally dubbed “Nova” by researchers—has been uncovered by reverse engineer Bruce, revealing a...
The Australian Government has announced financial sanctions and travel bans on four entities and one individual involved...
Researchers at Datadog Security Research have uncovered a major supply-chain compromise in the npm ecosystem involving 17...
Cybersecurity researchers at Koi Security have discovered the world’s first self-propagating malware targeting VS Code extensions on...
Cofense Intelligence has uncovered an evolving phishing campaign that uses copyright takedown notices as its primary lure....
Researchers at Palo Alto Networks’ Unit 42 have unveiled a new, actively developed malware strain dubbed Gremlin...