Research reports

1,224 reports from 387 publishers45 added in the past week

13 reports

13 reports, newest added first

Added Sat 10 Oct

APT41 Has Arisen From the DUST
Written by: Mike Stokkel, Pierre Gerlings, Renato Fontana, Luis Rocha, Jared Wilson, Stephen Eckels, Jonathan Lepore Executive Summary In collaboration with Google’s Threat Analysis Group (TAG), Mandiant has observed a sustained campaign by the advanced…
State-sponsored

GitHubPDF
Arid Viper poisons Android apps with AridSpy
ESET researchers discovered Arid Viper espionage campaigns spreading trojanized apps to Android users in Egypt and Palestine Lukas Stefanko 13 Jun 2024 • 25 min. read ESET researchers have identified five campaigns targeting Android users with trojanized…
State-sponsoredMobile

GitHubPDF
New BugSleep Backdoor Deployed in Recent MuddyWater Campaigns - Check Point Research
MuddyWater, an Iranian threat group affiliated with the Ministry of Intelligence and Security (MOIS), has significantly increased its activities in Israel since the beginning of the Israel-Hamas war in October 2023. This parallels with activities against…
State-sponsoredMalwarePhishing

GitHubPDF

i-soon-data-leaks-en
On Feb. 16, 2024, someone uploaded data to GitHub that included possible internal company communications, sales-related materials and product manuals belonging to the Chinese IT security services company i-Soon, also known as Anxun Information Technology. The…
State-sponsored

GitHubPDF
Pawn Storm Uses Brute Force and Stealth Against High-Value Targets
Pawn Storm Uses Brute Force and Stealth Against High-Value Targets | Trend Micro (US) APT & Targeted Attacks Pawn Storm Uses Brute Force and Stealth Against High-Value Targets To help defenders learn more about Pawn Storm's activities and adjust their…
State-sponsored

GitHubPDF
i-soon-data-leaks-jp
2024 年 2 月 16 日、中国の IT セキュリティサービス会社 i-Soon (別名 Anxun Information Technology) に属する可能性のある社内通信、セールス関連資料、製品マニュアルを含むデータが何者かによって GitHub にアップロードされました。漏えいした資料は、ある営利団体が、中国とつながりのある脅威アクターを支援するサイバースパイツールをどのように開発・サポートしたかを示すもののようです。漏えいデータの初期調査の一環として、Unit 42…
State-sponsored

GitHubPDF

chinese-apts-target-asean-entities-en
The first APT group, Stately Taurus, created two malware packages we believe targeted entities in Myanmar, the Philippines, Japan and Singapore. The timing of these campaigns coincided with the ASEAN-Australia Special Summit, held March 4-6, 2024. The second…
State-sponsored

GitHubPDF
chinese-apts-target-asean-entities-jp
Stately Taurus (別名 Mustang Panda、BRONZE PRESIDENT、Red Delta、LuminousMoth、Earth Preta、Camaro Dragon) は少なくとも 2012 年から活動しています。私たちは同グループを「サイバースパイ活動を日常的に行っている中国の持続的標的型攻撃 (APT) グループ」と評価しています。このグループはこれまで北米やヨーロッパ、アジアの政府機関や非営利団体、宗教団体、そのほかの非政府組織を標的にしてきました。私たちは最近、前述の…
State-sponsored

GitHubPDF

(3) Kimsuky is targeting an arms manufacturer in Europe.
(3) Kimsuky is targeting an arms manufacturer in Europe. | LinkedIn Kimsuky is targeting an arms manufacturer in Europe. linkedin.com/pulse/kimsuky-targeting-arms-manufacturer-europe-dmitry-melikov-dquge Dmitry Melikov Dmitry Melikov Cyber threats researcher.…
State-sponsored

GitHubPDF

SneakyChef espionage group targets government agencies with SugarGh0st and more infection techniques
Cisco Talos recently discovered an ongoing campaign from SneakyChef, a newly discovered threat actor using SugarGh0st malware, as early as August 2023. In the newly discovered campaign, we observed a wider scope of targets spread across countries in EMEA and…
State-sponsoredMalware

GitHubPDF
Flax Typhoon using legitimate software to quietly access Taiwanese organizations
Flax Typhoon using legitimate software to quietly access Taiwanese organizations | Microsoft Security Blog August 24, 2023 Flax Typhoon using legitimate software to quietly access Taiwanese organizations…
State-sponsored

GitHubPDF

Evasive Panda leverages Monlam Festival to target Tibetans
3/13/24, 5:36 PM Evasive Panda leverages Monlam Festival to target Tibetans https://www.welivesecurity.com/en/eset-research/evasive-panda-leverages-monlam-festival-target-tibetans/ 1/15 Evasive Panda leverages Monlam Festival to target Tibetans…
State-sponsored

GitHubPDF

Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.