Do Son Kaspersky uncovers a sophisticated APT41 cyberespionage campaign targeting African government IT, showcasing the Chinese group's full TTPs, including Impacket and Cobalt Strike.
threat group
Dire Wolf, a new Golang ransomware, is targeting manufacturing/tech in 11 countries. It uses double extortion, deletes backups, and has a "wipe mode" that permanently destroys files.
Red Canary uncovers Mocha Manakin, a new threat group using "paste and run" social engineering to deploy NodeInitRAT, a custom NodeJS RAT with potential ransomware links.
Uncover the advanced cyberespionage campaign using the EAGERBEE backdoor to infiltrate ISPs and governmental institutions in the Middle East.
At the heart of the UAC-0050 threat group's arsenal is RemcosRAT, a malware for remote surveillance and control.