#apt41 — Public Fediverse posts

#CheckPoint Research has profiled #SilverDragon, a Chinese-aligned group linked to #APT41 that targeted government and enterprise networks across Southeast Asia and Europe. Recent operations used the #GearDoor #backdoor with SSHcmd and SilverScreen, enabling remote access, covert screen capture, and stealthy control after #phishing and server exploitation.

https://research.checkpoint.com/2026/silver-dragon-targets-organizations-in-southeast-asia-and-europe/

#SilverDragon est 1 opération d’ #espionnage informatique suivie par plusieurs équipes de threat intelligence.Les chercheurs y voient une attribution à #APT41 avec 1 outillage soigné, des phases discrètes de reconnaissance et 1 intérêt marqué pour les réseaux gouvernementaux

https://tr92.fr/quand-le-cyber-espionnage-detat-avec-windows-et-google-drive-espionne-les-gouvernements/

Злоумышленники перенимают опыт коллег: что общего между SilverFox и APT41. Разбор атаки

Привет, Хабр! На связи Евгения Устинова, старший аналитик сетевой безопасности группы компаний «Гарда» . В статье хочу рассказать, как нам удалось связать инструментарий двух группировок через особенности реализации сетевых протоколов. Отследить эволюцию инструментов группировки SilverFox – например, ПО Winos – по отпечатку процедуры сетевой коммуникации оказалось довольно сложной задачей, поэтому я решила поделиться кейсом. Подключайтесь к расследованию

https://habr.com/ru/companies/garda/articles/962222/

#разбор_атаки #Winos #Silverfox #вредоносы #фишинг #ValleyRAT #apt41 #winnti

Details Emerge on Chinese Hacking Operation Impersonating US Lawmaker https://www.securityweek.com/details-emerge-on-chinese-hacking-operation-impersonating-us-lawmaker/ #cyberespionage #Nation-State #BrassTyphoon #espionage #ChinaAPT #Winnti #APT41 #China

Details Emerge on Chinese Hacking Operation Impersonating US Lawmaker https://www.securityweek.com/details-emerge-on-chinese-hacking-operation-impersonating-us-lawmaker/ #cyberespionage #Nation-State #BrassTyphoon #espionage #ChinaAPT #Winnti #APT41 #China

Chinese Spies Impersonated US Lawmaker to Deliver Malware to Trade Groups: Report https://www.securityweek.com/chinese-spies-impersonated-us-lawmaker-to-deliver-malware-to-trade-groups-report/ #cyberespionage #impersonation #Nation-State #espionage #ChinaAPT #APT41 #China #US

Chinese Spies Impersonated US Lawmaker to Deliver Malware to Trade Groups: Report https://www.securityweek.com/chinese-spies-impersonated-us-lawmaker-to-deliver-malware-to-trade-groups-report/ #cyberespionage #impersonation #Nation-State #espionage #ChinaAPT #APT41 #China #US

The SOC files: Rumble in the jungle or APT41’s new target in Africa
#APT41
https://securelist.com/apt41-in-africa/116986/

Chinese Espionage Crews Circle SentinelOne in Year-Long Reconnaissance Campaign https://www.securityweek.com/chinese-espionage-crews-circle-sentinelone-in-year-long-reconnaissance-campaign/ #IncidentResponse #Malware&Threats #SentinelLabs #NationState #SentinelOne #PurpleHaze #Shadowpad #APT41 #China

Chinese Espionage Crews Circle SentinelOne in Year-Long Reconnaissance Campaign https://www.securityweek.com/chinese-espionage-crews-circle-sentinelone-in-year-long-reconnaissance-campaign/ #IncidentResponse #Malware&Threats #SentinelLabs #NationState #SentinelOne #PurpleHaze #Shadowpad #APT41 #China

Google exposed Chinese state-backed APT41 using TOUGHPROGRESS malware to exploit Google Calendar for C2. This group hid commands in calendar events, targeting government entities. Google shut down the malicious ops. #CyberAttack #APT41 #ThreatIntel

Nieuwsbrief 368, van TikTok-valstrik tot Russische spionage: de digitale dreigingen van deze week onthuld

Nieuwsbrief Cybercrimeinfo: https://www.ccinfo.nl/menu-nieuws-trends/nieuwsbrief-archief/nieuwsbrief-berichten/2538810_nieuwsbrief-368-van-tiktok-valstrik-tot-russische-spionage-de-digitale-dreigingen-van-deze-week-onthuld

Podcast Spotify: https://open.spotify.com/episode/6eB0sS0kLv67X9Ozezt9dh?si=c129cf1d63f84f51

Podcast Youtube: https://youtu.be/4VbVxFCiuaU?si=EMQ1sMpGE4uLmtN1

#Cybercrime #Cyberdreiging #TikTokMalware #APT41 #LaundryBear #Spionage #Darkweb #Phishing #DigitaleVeiligheid #Cybercrimeinfo #Cybersecurity #Infostealer #GoogleCalendarHack #Ransomware #Cyberaanval #Hackers #Malware #Digiweerbaar #Cyberwar

APT41 en het misbruik van Google Calendar: een nieuwe manier van cyberaanvallen

Artikel Cybercrimeinfo: https://www.ccinfo.nl/menu-onderwijs-ontwikkeling/cybercrime/2534024_apt41-en-het-misbruik-van-google-calendar-een-nieuwe-manier-van-cyberaanvallen

Podcast Spotify: https://open.spotify.com/episode/03l4nNcNixHx48RMGcJWr7?si=ySlbYv2kTt-rnHKNH5ZGxA

Podcast Youtube: https://youtu.be/h2ECy7-bKM8?si=lfaODP-d4IN4f65s

#APT41 #GoogleCalendar #cyberaanvallen #cyberdreigingen #cyberbeveiliging #cloudsecurity #phishing #MFA #TOUGHPROGRESS #C2communicatie #socialemanipulatie #digitaleveiligheid #cybercriminaliteit #APT41aanval

Detect #APT41 attacks abusing Google Calendar to drop TOUGHPROGRESS malware using a set of Sigma rules in the SOC Prime Platform.
https://socprime.com/blog/detect-apt41-attacks-abusing-google-calendar/?utm_source=mastodon&utm_medium=social&utm_campaign=latest-threats&utm_content=blog-post

Brass Typhoon: The #Chinese #Hacking Group Lurking in the Shadows

Though less well-known than groups like #VoltTyphoon and #SaltTyphoon , #BrassTyphoon , or #APT41 , is an infamous, longtime #espionage actor that foreshadowed recent telecom #hacks.
#security #China

https://www.wired.com/story/brass-typhoon-china-cyberspies/

Chinese APT Tools Found in Ransomware Schemes, Blurring Attribution Lines – Source: www.securityweek.com https://ciso2ciso.com/chinese-apt-tools-found-in-ransomware-schemes-blurring-attribution-lines-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Malware&Threats #securityweekcom #securityweek #NationState #Cybercrime #ransomware #TrendMicro #Shadowpad #ChinaAPT #symantec #APT41 #PlugX

Chinese APT Tools Found in Ransomware Schemes, Blurring Attribution Lines https://www.securityweek.com/chinese-apt-tools-found-in-ransomware-schemes-blurring-attribution-lines/ #Malware&Threats #NationState #Cybercrime #ransomware #TrendMicro #Shadowpad #ChinaAPT #Symantec #APT41 #PlugX

quote :
這次針對 #菲律賓 總統辦公室的入侵，是由 #中國 政府附屬駭客組織 #APT41 所發動，是針對菲律賓多個政府機構辦公室、醫院網路和其他組織的間諜活動一環，大部分攻擊是在2023年初至2024年6月期間發動的。

中國駭客入侵菲律賓總統辦公室 竊取敏感軍事文件
https://news.ltn.com.tw/news/world/breakingnews/4916578

Hackers now use AppDomain Injection to drop CobaltStrike beacons
#APT41 #APPDOMAINMANAGERINJECTION #hackers https://www.bleepingcomputer.com/news/security/hackers-now-use-appdomain-injection-to-drop-cobaltstrike-beacons/