BackdoorDiplomacy is continuously evolving its TTPs during cyberespionage campaigns. Unit 42 spotted the new campaign by the group that targeted Iranian government entities between July and December 2022. Historically, it has targeted government a…

The Solaris marketplace emerged a few months ago, following the seizure of Hydra, attempting to capture a portion of the then-disturbed market. The new marketplace quickly captured about 25% of the market and processed roughly $150M in illegal sales.

NoName057(16), a pro-Russian cybercrime gang, was found launching DDoS attacks against telecom, government, media, military, transportation, and financial organizations in Ukraine and NATO countries. Hackers utilize Telegram to claim responsibility for…

The hacktivist group known as GhostSec claims to have conducted the first-ever ransomware attack against a remote terminal unit (RTU), a type of ICS device used for communications between field devices and SCADA systems.

A Pro-Russian cybercrime group named NoName057(16) is actively launching distributed denial-of-service (DDoS) attacks against organizations in Ukraine and NATO countries.

The recently spotted Dark Pink campaign has been targeting a vast range of organizations across Asia Pacific and Europe, since H2 2022, to steal corporate data – reported Group-IB. Dark Pink APT presumably visits job boards to tailor its messages …

A cybercrime group tracked as Scattered Spider has been observed exploiting an old vulnerability in an Intel Ethernet diagnostics driver for Windows in recent attacks on telecom and BPO firms.

During an incident response engagement to a Lorenz ransomware attack, researchers at S-RM determined that the hackers had breached the victim network five months before starting to move laterally, steal data, and encrypt systems.

According to ESET researchers, attackers use a fake Shagle website that tricks victims into downloading the malicious APK file. In reality, the app is a trojanized version of the standard Telegram app for Android. 

Government and military organizations in the Asia-Pacific region are being targeted by a previously unknown advanced persistent threat (APT) actor, per the latest research conducted by Albert Priego of Group-IB