From the beginning of 2019 until July, we have been able to identify different spear-phishing campaigns related to Cloud Atlas mostly focused on Russia, Central Asia and regions of Ukraine with ongoing military conflicts.

Inception targets Europe with year old office vulnerability. Read the full report.

The activity of the advanced hacker group the researchers call Silence has increased significantly over the past year. Victims in the financial sector are scattered across more than 30 countries and financial losses have quintupled.

ИБ-специалисты сразу нескольких компаний обнаружили кибершпионскую группировку Lyceum (она же Hexane), основными целями которой становятся нефтегазовые компании на Ближнем Востоке, телекоммуникационные компании в странах Африки и Азии, а также энергетический сектор.

Впервые обнаружив ATMDtrack, мы подумали, что наткнулись на очередное семейство вредоносного ПО для банкоматов. Теперь мы можем добавить в послужной список группы Lazarus еще одно семейство: ATMDtrack и Dtrack.

This is the first documented case of one-click mobile exploits used to target Tibetan groups, and reflects an escalation in the sophistication of digital espionage threats targeting the community.

Research conducted in a joint effort between Intezer and Check Point Research maps the Russian APT ecosystem on an unprecedented scale.

A new threat actor Kaspersky calls SandCat, believed to be Uzbekistan’s intelligence agency, is so bad at operational security, researchers have found multiple zero-day exploits used by the group, and even caught malware the group was still developing.

  Introduction Back in March 2019, Amnesty International published a report that uncovered a targeted attack against journalists and human rights activists in Egypt. The victims even received an e-mail from Google warning them that government-backed attackers attempted to steal their passwords. According to the report, the attackers did not rely on traditional phishing methods... Click to Read More

APT41 compromised company behind TeamViewer - which enabled them to access *any* system with TeamViewer installed 👀👀 #FireEyeSummit

ESET experts discover a previously unreported cyberespionage platform used in targeted attacks against privacy-concerned users in diplomatic missions and governmental institutions.

OverviewThe Anomali Threat Research Team has identified an ongoing campaign which it believes is being conducted by the China-based threat group, Mustang Panda. The team first revealed these findings on Wednesday, October 2, during Anomali Detect 19, the company’s annual user conference, in a session titled: “Mustang Panda Riding Across Country Lines.”CrowdStrike researchers first published information on Mustang Panda in June 2018, after approximately one year of observing

a mac backdoor written by the infamous lazarus apt group

In this three-part series, we look at how Beijing used cyber espionage to bolster dual-use turbine engines and compete against Western aerospace firms.

ESET research shows how The Dukes, the APT group suspected of breaching the DNC, has been busy compromising government targets while staying under the radar for years.