#cyberespionage — Public Fediverse posts

🚨 SIGINT // Cybersecurity Watch — 2026-08-29
US disrupts Chinese hacking platform used in attacks on military and critical infrastructure networks.
https://www.securityweek.com/us-disrupts-chinese-hacking-platform-used-in-military-and-critical-infrastructure-attacks/
#CyberEspionage #InfoSec #CriticalInfrastructure #China

The DOJ and FBI seized QScan and QTRouter, platforms run by China state-sponsored hackers to hide attacks on U.S. critical infrastructure.

#QScan #QTRouter #QTFY #ChinaHackers #CyberEspionage #CriticalInfrastructure

http://securityonline.info/qscan-qtrouter-china-hackers-seized/?utm_source=mastodon&utm_medium=jetpack_social

T-Mobile security staff physically severed a network cable in 2024 to block Chinese state-linked Salt Typhoon hackers from reaching the carrier's infrastructure.

#SaltTyphoon #TMobile #ChinaHack #Telecommunications #CyberEspionage

https://meterpreter.org/tmobile-salt-typhoon-network-cable-cut/?utm_source=mastodon&utm_medium=jetpack_social

SilkParasite: Tracking a China-Nexus APT Across Central Asia

SilkParasite is a cyberespionage operation assessed with medium confidence as China-nexus that targeted government bodies across Central Asia. Seven remote access tool families were deployed, five of which were previously undocumented: DriveSilkRAT, CookiETagRAT, NomadRAT, GoginRAT, and NodeEdgeRAT. The toolset is small, modular, and professionally engineered with traces of AI-assisted development. Initial access occurred through malicious Microsoft Office documents delivered via spear-phishing, using regionally tailored lures impersonating government ministries. The operation leveraged DLL sideloading as the primary delivery mechanism and used Google Drive for command-and-control communications to hide within trusted services. Infrastructure analysis identified connections to China Unicom's backbone network, and operational patterns suggest a functioning software organization with maintained build pipelines and careful operational security.

Pulse ID: 6a86a70eb8b57f155e62d4f7
Pulse Link: https://otx.alienvault.com/pulse/6a86a70eb8b57f155e62d4f7
Pulse Author: AlienVault
Created: 2026-08-20 07:04:46

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Asia #CentralAsia #China #CyberSecurity #Cyberespionage #DRat #Edge #Espionage #Google #Government #InfoSec #Microsoft #MicrosoftOffice #OTX #Office #OpenThreatExchange #Phishing #RAT #Rust #SideLoading #SpearPhishing #bot #AlienVault

https://winbuzzer.com/2026/03/25/darksword-ios-exploit-leaks-github-threatens-millions-xcxwbn/

DarkSword iOS Exploit Leaks on GitHub, Threatens Millions

#iOS #Apple #Cybersecurity #ZeroDay #Exploits #iPhone #Surveillance #Malware #Spyware #Hackers #Cybercrime #ThreatIntelligence #iOS18 #iPad #iPadOS #Hacking #Russia #Cyberespionage #Darksword #Iverify

North Korean hackers are using Google’s own tools to remotely wipe Android devices and hijack messaging apps. Think your account is safe? Dive into how a single breach can trigger a digital meltdown.

https://thedefendopsdiaries.com/konni-activity-cluster-north-korean-apts-exploit-google-find-hub-for-advanced-cyber-espionage/

#konni
#apt37
#cyberespionage
#androidsecurity
#googlefindhub
#malware
#northkorea
#spearphishing
#infosec

Humanoid robot found vulnerable to Bluetooth hack, data leaks to China https://www.helpnetsecurity.com/2025/10/16/unitree-g1-humanoid-robot-vulnerability/ #industrialrobots #cyberespionage #cybersecurity #vulnerability #Don'tmiss #hardware #research #privacy #News

AMERICA'S SUPER SECRET ARMIES: Unveiling the Shadow Warriors

https://x.com/GetTheDailyDirt/status/1964450692254335438

#DeltaForce #SecretArmies #SpecialOperations #CovertMissions #AsymmetricalWarfare #CyberWarfare #USMilitary #EliteForces #Counterterrorism #HostageRescue #SpecialForces #ClandestineOperations #ShadowWarriors #CyberCommand #NationalSecurity #MilitaryStrategy #CovertWar #IntelligenceGathering #DirectAction #CyberEspionage #GreenBerets #NightStalkers #DEVGRU #SEALTeamSix #BlackOps #MilitarySecrecy #USCyberForce

Amazon blocks APT29 campaign targeting Microsoft device code authentication – Source: securityaffairs.com https://ciso2ciso.com/amazon-blocks-apt29-campaign-targeting-microsoft-device-code-authentication-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #Cyberespionage #BreakingNews #Intelligence #SecurityNews #hackingnews #hacking #Amazon #Russia #APT29

📆 𝗔𝘂𝗴𝘂𝘀𝘁 𝗥𝗲𝘃𝗶𝗲𝘄 𝗖𝗼𝗺𝗺𝗶𝘁𝘁𝗲𝗲 𝗠𝗲𝗲𝘁𝗶𝗻𝗴 𝗛𝗶𝗴𝗵𝗹𝗶𝗴𝗵𝘁𝘀 📆

We had our monthly review committee meeting this week and the Canon keeps getting better! Here are some quick highlights:

🅒 Stephanie Pirman and Joanna Grama led very engaged discussions of their detailed reviews.
🅒 Trying out new Hall of Fame scoring criteria
🅒 Welcomed 4 new committee members
🅒 50 new reviews are currently staged with more arriving weekly!

#CyberCanon #CyberCanonHoF #CybersecurityBooks #EDR #cyberespionage

Kim Zetter's (@kimzetter) 2014 book 𝘊𝘰𝘶𝘯𝘵𝘥𝘰𝘸𝘯 𝘵𝘰 𝘡𝘦𝘳𝘰 𝘋𝘢𝘺 was one of the first inducted into the Cybersecurity Canon Hall of Fame 🏆. The book unpacks the story of #Stuxnet and was a first of its kind to turn a real-world cyber espionage operation 🕵‍♀️ into a gripping thriller of a book.

Last week, Kim joined #CyberCanon President Rick Howard at the 𝘞𝘦𝘥𝘯𝘦𝘴𝘥𝘢𝘺 𝘞𝘦𝘦 𝘋𝘳𝘢𝘮 gathering for a candid discussion and Q&A with an eager group of about 40 cybersecurity leaders.

This event was coordinated before the recent Operation Midnight Hammer attack, which made the timing for this Stuxnet conversation impeccable. Many members attributed this to the uncanny foresight of Wee Dram host J. Carlos Vega, CISSP. 😄

Book review 👉 https://tinyurl.com/mubj2z4n

#CyberCanonHoF #Cybersecurity #CybersecurityBooks #CyberEspionage

In 2024, a group known as DarkCasino emerged as a cyber threat entity. This group has been linked to exploiting a vulnerability in WinRAR, specifically identified as CVE 2023 38831. DarkCasino has been using this security loophole to carry out phishing attacks targeting users in industries such as casinos, financial services, and government sectors across countries. Their strategy involves sending emails containing manipulated archives to distribute malicious software and gather sensitive information.

DarkCasino, while sharing similarities with other cyber threat groups, stands out for its sophisticated techniques and primarily financial motivation. Their use of Visual Basic-based Trojan horse programs is a testament to their advanced capabilities. Their activities underscore the ever-evolving landscape of risks and the critical need for robust cybersecurity measures. Ongoing surveillance and analysis by cybersecurity firms like NSFOCUS and Group IB have provided insights into DarkCasino's operations, but many specifics regarding their targets and the complete extent of their actions remain undisclosed, adding to the complexity of the challenge.

#DarkCasino #APT #CyberSecurity #WinRAR #ZeroDay #PhishingAttacks #CyberThreats #DataExfiltration #Malware #AdvancedThreats #VisualBasic #TrojanHorse #FinancialServices #GovernmentSecurity #NSFOCUS #GroupIB #CyberEspionage #ThreatDetection #InformationSecurity #EconomicMotivation