Browsing: Threat Campaign

Top Highlights UNC6671 employs sophisticated voice phishing (vishing) combined with real-time adversary-in-the-middle (AiTM) techniques to…

Essential Insights The persistent “mdrfckr” SSH campaign has maintained a stable authorized_keys file for nearly…

Quick Takeaways Ghostwriter (FrostyNeighbor) continually evolves malware tools like PicassoLoader and Cobalt Strike, using sophisticated…

Essential Insights A Chinese-linked threat actor, FamousSparrow, targeted an Azerbaijani oil and gas company with…

Quick Takeaways Attackers are abusing RubyGems by uploading over 150 malicious gems to exfiltrate publicly…

Quick Takeaways A threat actor used an AI-developed zero-day exploit to bypass two-factor authentication via…

Quick Takeaways A large-scale phishing campaign targeted over 13,000 health care organizations, primarily in the…

Essential Insights The PCPJack framework targets exposed cloud services (e.g., Docker, Kubernetes, Redis, MongoDB) to…

Quick Takeaways Cybersecurity researchers discovered malicious Python packages on PyPI that covertly deploy the ZiChatBot…

Top Highlights Iranian-backed groups like MuddyWater are deploying sophisticated social engineering via Microsoft Teams and…