Unmasking I-Soon | The Leak That Revealed China’s Cyber Operations
The I-Soon leak reveals the maturing nature of China’s cyber espionage and a competitive hacker marketplace driven by government demands.
Read More
ScarCruft | Attackers Gather Strategic Intelligence and Target Cybersecurity Professionals
New ScarCruft activity suggests the adversary is planning to target cybersecurity professionals and businesses.
Read More
Sandman APT | China-Based Adversaries Embrace Lua
SentinelLabs, Microsoft, and PwC threat intelligence researchers provide attribution-relevant information on the Sandman APT cluster.
Read More
Elephant Hunting | Inside an Indian Hack-For-Hire Group
Exploring the technical intricacies of Appin, a hack-for-hire group, revealing confirmed attribution and global threat activity, both old and new.
Read More
Arid Viper | APT’s Nest of SpyC23 Malware Continues to Target Android Devices
Hamas-aligned threat actor delivers spyware through weaponized apps posing as Telegram or Skipped messenger.
Read More
The Israel-Hamas War | Cyber Domain State-Sponsored Activity of Interest
Cyber warfare occurring amidst the Israel-Hamas war underscores the importance of keeping tabs on rising APTs and opportunistic hacktivists.
Read More
Sandman APT | A Mystery Group Targeting Telcos with a LuaJIT Toolkit
Sophisticated threat actor deploys high-end malware utilizing the LuaJIT platform to backdoor telcos in Europe, Middle East and South Asia.
Read More
CapraTube | Transparent Tribe’s CapraRAT Mimics YouTube to Hijack Android Phones
Pakistan-aligned threat actor weaponizes fake YouTube apps on the Android platform to deliver mobile remote access trojan spyware.
Read More
JumpCloud Intrusion | Attacker Infrastructure Links Compromise to North Korean APT Activity
North Korean state sponsored APT is behind a new supply chain attack on zero-trust directory platform JumpCloud.
Read More
Kimsuky Strikes Again | New Social Engineering Campaign Aims to Steal Credentials and Gather Strategic Intelligence
Threat actor targets experts in North Korean affairs with spoofed URLs and weaponized Office documents to steal Google and other credentials.
Read More