#cyberespionage — Public Fediverse posts

Espionage groups use the BlueMoon exploit kit in new attacks. Discover how BlueMoon exploit kit campaigns exploit Chrome zero-days.

#BlueMoon #ExploitKit #Chrome #ZeroDay #CyberEspionage #InfoSec

https://securityonline.info/bluemoon-exploit-kit-campaigns/?utm_source=mastodon&utm_medium=jetpack_social

SilkParasite: Tracking a China-Nexus APT Across Central Asia

SilkParasite is a cyberespionage operation assessed with medium confidence as China-nexus that targeted government bodies across Central Asia. Seven remote access tool families were deployed, five of which were previously undocumented: DriveSilkRAT, CookiETagRAT, NomadRAT, GoginRAT, and NodeEdgeRAT. The toolset is small, modular, and professionally engineered with traces of AI-assisted development. Initial access occurred through malicious Microsoft Office documents delivered via spear-phishing, using regionally tailored lures impersonating government ministries. The operation leveraged DLL sideloading as the primary delivery mechanism and used Google Drive for command-and-control communications to hide within trusted services. Infrastructure analysis identified connections to China Unicom's backbone network, and operational patterns suggest a functioning software organization with maintained build pipelines and careful operational security.

Pulse ID: 6a86a70eb8b57f155e62d4f7
Pulse Link: https://otx.alienvault.com/pulse/6a86a70eb8b57f155e62d4f7
Pulse Author: AlienVault
Created: 2026-08-20 07:04:46

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Asia #CentralAsia #China #CyberSecurity #Cyberespionage #DRat #Edge #Espionage #Google #Government #InfoSec #Microsoft #MicrosoftOffice #OTX #Office #OpenThreatExchange #Phishing #RAT #Rust #SideLoading #SpearPhishing #bot #AlienVault

North Korean hackers are using Google’s own tools to remotely wipe Android devices and hijack messaging apps. Think your account is safe? Dive into how a single breach can trigger a digital meltdown.

https://thedefendopsdiaries.com/konni-activity-cluster-north-korean-apts-exploit-google-find-hub-for-advanced-cyber-espionage/

#konni
#apt37
#cyberespionage
#androidsecurity
#googlefindhub
#malware
#northkorea
#spearphishing
#infosec

WiFi Sniffer Leads to Russian Spying Charges for Dutch Teens https://thecyberexpress.com/wifi-sniffer-russian-spying-dutch-teens/ #TheCyberExpressNews #cybercrimearrests #TheCyberExpress #cyberespionage #FirewallDaily #cyberattacks #wifisniffing #CyberThreat #cybercrime #Ransomware #CyberNews #Ukraine #Russia #spying

Amazon blocks APT29 campaign targeting Microsoft device code authentication – Source: securityaffairs.com https://ciso2ciso.com/amazon-blocks-apt29-campaign-targeting-microsoft-device-code-authentication-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #Cyberespionage #BreakingNews #Intelligence #SecurityNews #hackingnews #hacking #Amazon #Russia #APT29

📆 𝗔𝘂𝗴𝘂𝘀𝘁 𝗥𝗲𝘃𝗶𝗲𝘄 𝗖𝗼𝗺𝗺𝗶𝘁𝘁𝗲𝗲 𝗠𝗲𝗲𝘁𝗶𝗻𝗴 𝗛𝗶𝗴𝗵𝗹𝗶𝗴𝗵𝘁𝘀 📆

We had our monthly review committee meeting this week and the Canon keeps getting better! Here are some quick highlights:

🅒 Stephanie Pirman and Joanna Grama led very engaged discussions of their detailed reviews.
🅒 Trying out new Hall of Fame scoring criteria
🅒 Welcomed 4 new committee members
🅒 50 new reviews are currently staged with more arriving weekly!

#CyberCanon #CyberCanonHoF #CybersecurityBooks #EDR #cyberespionage

The Kremlin's Most Devious #Hacking Group Is Using #Russian ISPs to Plant #Spyware

The #FSB #cyberespionage group known as #Turla seems to have used its control of Russia's network #infrastructure to meddle with web traffic and trick #diplomats into #infecting their computers.
#russia #kremlin #isp

https://www.wired.com/story/russia-fsb-turla-secret-blizzard-apolloshadow-isp-cyberespionage/

Russia’s FSB-linked hacking group Turla exploits Russian ISPs to implant spyware on diplomats' devices in Moscow, hijacking internet traffic to steal sensitive data. A new espionage tactic blurs the line between surveillance and intrusion. Full story 👇🕵️‍♂️🌐 #CyberEspionage #Turla #FSB #CyberSecurity #newz

https://www.wired.com/story/russia-fsb-turla-secret-blizzard-apolloshadow-isp-cyberespionage/

Kim Zetter's (@kimzetter) 2014 book 𝘊𝘰𝘶𝘯𝘵𝘥𝘰𝘸𝘯 𝘵𝘰 𝘡𝘦𝘳𝘰 𝘋𝘢𝘺 was one of the first inducted into the Cybersecurity Canon Hall of Fame 🏆. The book unpacks the story of #Stuxnet and was a first of its kind to turn a real-world cyber espionage operation 🕵‍♀️ into a gripping thriller of a book.

Last week, Kim joined #CyberCanon President Rick Howard at the 𝘞𝘦𝘥𝘯𝘦𝘴𝘥𝘢𝘺 𝘞𝘦𝘦 𝘋𝘳𝘢𝘮 gathering for a candid discussion and Q&A with an eager group of about 40 cybersecurity leaders.

This event was coordinated before the recent Operation Midnight Hammer attack, which made the timing for this Stuxnet conversation impeccable. Many members attributed this to the uncanny foresight of Wee Dram host J. Carlos Vega, CISSP. 😄

Book review 👉 https://tinyurl.com/mubj2z4n

#CyberCanonHoF #Cybersecurity #CybersecurityBooks #CyberEspionage

Turkish Cyber Espionage Campaign Leverages Zero-Day in Output Messenger https://dailydarkweb.net/turkish-cyber-espionage-campaign-leverages-zero-day-in-output-messenger/ #MicrosoftThreatIntelligence #SoftwareVulnerability #ZeroDayVulnerability #nationalsecurity #OutputMessenger #CVE-2025-27920 #CyberEspionage #TurkishHackers #CyberSecurity #CyberAttacks #MarbledDust #databreach #hacking #Kurdish #Srimax

Iran State-Sponsored Hackers Intelligence Operations Using Fake Job Offers https://cybersecuritynews.com/iran-hackers-fake-job-offers/ #CounterintelligenceOperations #InformationSecurity #CyberEspionage #IranianHackers #CyberSecurity #CyberAttack

#ActuLibre Iranian Hackers Exploiting VPN Flaws to Backdoor Organizations Worldwide -> http://feedproxy.google.com/~r/TheHackersNews/~3/7XVBn0UzKZ0/iranian-hackers-vpn-vulnerabilities.html #Iraniancomputers #VPNVulnerability #securevpnserver #cyberespionage #IranianHackers #cybersecurity #Malwareattack #hackingnews #VPNhacking