Research reports
1,224 reports from 387 publishers45 added in the past week
Added Thu 27 Jun 2024
chinese-apts-target-asean-entities-jp
Stately Taurus (別名 Mustang Panda、BRONZE PRESIDENT、Red Delta、LuminousMoth、Earth Preta、Camaro Dragon) は少なくとも 2012 年から活動しています。私たちは同グループを「サイバースパイ活動を日常的に行っている中国の持続的標的型攻撃 (APT) グループ」と評価しています。このグループはこれまで北米やヨーロッパ、アジアの政府機関や非営利団体、宗教団体、そのほか の非政府組織を標的にしてきました。 私たちは最近、前述の…
State-sponsored
payloads-in-malicious-onenote-samples-en
Next-Generation Firewall with cloud-delivered security services including WildFire. Prisma Access devices with cloud-delivered security services including WildFire. Cortex XDR and XSIAM agents help protect against post-exploitation activities using the…
Added Wed 26 Jun 2024
(3) Kimsuky is targeting an arms manufacturer in Europe.
(3) Kimsuky is targeting an arms manufacturer in Europe. | LinkedIn Kimsuky is targeting an arms manufacturer in Europe. linkedin.com/pulse/kimsuky-targeting-arms-manufacturer-europe-dmitry-melikov-dquge Dmitry Melikov Dmitry Melikov Cyber threats researcher.…
State-sponsored
100DaysofYARA - SpectralBlur
Today will be a quick post on a TA444 (aka Sapphire Sleet, BLUENOROFF, STARDUST CHOLLIMA) Macho family tracked as SpectralBlur we found in August, and how finding it led us to stumble upon an early iteration of KANDYKORN (aka SockRacket). Please read…
Objective-See's Blog
The first malware of 2024 is (already) here! by: Patrick Wardle / January 4, 2024 📝 👾 Want to play along? As ‘Sharing is Caring’ I’ve uploaded a sample of the malware SpectralBlur.zip to our public macOS malware collection. The password is: infect3d…
Malware
Added Tue 25 Jun 2024
SneakyChef espionage group targets government agencies with SugarGh0st and more infection techniques
Cisco Talos recently discovered an ongoing campaign from SneakyChef, a newly discovered threat actor using SugarGh0st malware, as early as August 2023. In the newly discovered campaign, we observed a wider scope of targets spread across countries in EMEA and…
State-sponsoredMalware
In-Depth Analysis: Velvet Ant's Prolonged Cyber Attack on a Large Organization
Discover the detailed forensic investigation by Sygnia into the sophisticated cyber attack by Velvet Ant on a major organization. Sygnia Team 16 June 2024 Key Takeaways In late 2023, a large organization was the victim of a serious cyber attack. Sygnia’s…
Attachment 1 - Night Dragon Specific Protection Measures for Consideration
The exploits and methods contained in Night Dragon’s attack set are not new or unique to our industry, nor are the approaches or methods to combat it. However NERC issues this Advisory in response to an identified pattern of activity that has been directed…
Flax Typhoon using legitimate software to quietly access Taiwanese organizations
Flax Typhoon using legitimate software to quietly access Taiwanese organizations | Microsoft Security Blog August 24, 2023 Flax Typhoon using legitimate software to quietly access Taiwanese organizations…
State-sponsored
Added Thu 14 Mar 2024
Evasive Panda leverages Monlam Festival to target Tibetans
3/13/24, 5:36 PM Evasive Panda leverages Monlam Festival to target Tibetans https://www.welivesecurity.com/en/eset-research/evasive-panda-leverages-monlam-festival-target-tibetans/ 1/15 Evasive Panda leverages Monlam Festival to target Tibetans…
State-sponsored
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.