Do Son GTIG report: Defense Industrial Base faces "constant siege" from Russian drone hackers & North Korean IT insiders. Learn the new threats.
SANDWORM
Sandworm (APT44) has shifted tactics, favoring misconfigured edge devices over complex exploits to breach energy and telecom sectors via credential replay.
Cyble exposed a Sandworm-linked espionage campaign targeting Belarusian military UAV personnel. It uses a malicious LNK file to deploy OpenSSH over Tor obfs4 for stealthy, persistent remote access.
Symantec exposed a Russian-aligned espionage campaign in Ukraine using LotL tactics. Attackers used a Sandworm-linked webshell (Localolive) and abused scheduled tasks to dump credentials and bypass Windows Defender.
Uncover the threats posed by Seashell Blizzard, a cyber espionage group behind the BadPilot campaign targeting critical sectors.
Explore the Maverits Special Report on APT28, a notorious Russian cyber espionage group. Learn about their tactics, targets, and impact on government institutions.
Alarming rise of cyber threats targeting the UK by Russian threat actors. Learn about the dangerous shift in geopolitical tensions and their impact on critical infrastructure.
Uncover the evolving cyberwarfare tactics of Russian state-backed hackers. Find out how they exploit mobile devices for espionage and data theft.
The Russia-linked Advanced Persistent Threat groups continues to evolve, posing a significant threat to Operational Technology globally
The report by Forescout Vedere Labs provides a comprehensive analysis of two separate attack waves on Denmark's energy infrastructure
Russia-affiliated group Sandworm has emerged as a formidable force, orchestrating an intricate cyber-physical attack on Ukrainian infrastructure
Google's TAG identified multiple state-sponsored hacking groups actively leveraging a known vulnerability (CVE-2023-38831) in WinRAR