#cyberespionage — Public Fediverse posts

Chinese hackers launch Chrome zero-day exploit chain attacks against NGOs. Learn how this Chrome zero-day exploit chain exploits patch gaps.

#ChromeZeroDay #JungleBamboo #UTA0560 #CyberEspionage #InfoSec #Malware

http://securityonline.info/chrome-zero-day-exploit-chain/?utm_source=mastodon&utm_medium=jetpack_social

The ted backdoor is DPRK Linux malware hidden inside HAProxy. It pairs with curlRAT to spy on South Korean media and automotive firms, Rapid7 reports.

#TedBackdoor #curlRAT #DPRK #APT37 #LinuxMalware #HAProxy #SouthKorea #Cyberespionage #Rapid7 #InfoSec

http://securityonline.info/ted-backdoor-curlrat-dprk/?utm_source=mastodon&utm_medium=jetpack_social

Threat analysts reveal Kimsuky uses AI agent opencode to mass-produce phishing decoys. Discover how the group leverages AI to enhance its LNK attacks.

#Kimsuky #Opencode #AIAgent #CyberEspionage #Cybersecurity

https://securityonline.info/kimsuky-ai-agent-opencode/?utm_source=mastodon&utm_medium=jetpack_social

Espionage groups use the BlueMoon exploit kit in new attacks. Discover how BlueMoon exploit kit campaigns exploit Chrome zero-days.

#BlueMoon #ExploitKit #Chrome #ZeroDay #CyberEspionage #InfoSec

https://securityonline.info/bluemoon-exploit-kit-campaigns/?utm_source=mastodon&utm_medium=jetpack_social

Espionage groups use the BlueMoon exploit kit in new attacks. Discover how BlueMoon exploit kit campaigns exploit Chrome zero-days.

#BlueMoon #ExploitKit #Chrome #ZeroDay #CyberEspionage #InfoSec

https://securityonline.info/bluemoon-exploit-kit-campaigns/?utm_source=mastodon&utm_medium=jetpack_social

Espionage groups use the BlueMoon exploit kit in new attacks. Discover how BlueMoon exploit kit campaigns exploit Chrome zero-days.

#BlueMoon #ExploitKit #Chrome #ZeroDay #CyberEspionage #InfoSec

https://securityonline.info/bluemoon-exploit-kit-campaigns/?utm_source=mastodon&utm_medium=jetpack_social

Espionage groups use the BlueMoon exploit kit in new attacks. Discover how BlueMoon exploit kit campaigns exploit Chrome zero-days.

#BlueMoon #ExploitKit #Chrome #ZeroDay #CyberEspionage #InfoSec

https://securityonline.info/bluemoon-exploit-kit-campaigns/?utm_source=mastodon&utm_medium=jetpack_social

A Cambodia malware campaign hides SparkRAT in PNG files and abuses a vulnerable driver to kill antivirus, Acronis TRU reports.

#SparkRAT #BYOVD #Cambodia #Malware #CyberEspionage #SilverFox

http://securityonline.info/cambodia-malware-campaign-sparkrat/?utm_source=mastodon&utm_medium=jetpack_social

The Computer Emergency Response Team of Ukraine (CERT-UA) reports that the threat actor group UAC-0184 is increasingly using popular messengers and social engineering in 2024 to target the Ukrainian military, and steal documents/messenger data (e.g. Signal). Malware delivered include IDAT, RemcosRAT, VIOTTOKEYLOGGER, XWorm, SIGTOP and TUSC. A lot of IOC provided, and images depict infection chains or lure messages. 🔗 (Ukrainian language) https://cert.gov.ua/article/6278521

#CERTUA #UAC0184 #Ukraine #cyberespionage #threatintel #IOC #RemcosRAT #IDAT #xworm

Trend Micro reports on cyberattacks on technology, research and government using the Waterbear backdoor malware family, which has been linked to Chinese cyberespionage group called Earth Hundun (aka BlackTech, CIRCUIT PANDA, Palmerworm, etc.). Trend Micro describes Waterbear's attack chain (from loader to downloader) and features, as well as its latest version called Deuterbear. MITRE ATT&CK TTPs and IOC listed. 🔗 https://www.trendmicro.com/en_us/research/24/d/earth-hundun-waterbear-deuterbear.html

#cyberespionage #BlackTech #threatintel #China #IOC #EarthHundun #Waterbear #Deuterbear