#oceanlotus — Public Fediverse posts

Discover how the new OceanLotus APT-C-00 campaign uses LNK files, DLL sideloading, and advanced evasion techniques to deploy stealthy malware on Windows.

#OceanLotus #APTC00 #Cybersecurity #Malware #APT32

https://meterpreter.org/oceanlotus-apt-c-00-campaign/?utm_source=mastodon&utm_medium=jetpack_social

Discover how the new OceanLotus APT-C-00 campaign uses LNK files, DLL sideloading, and advanced evasion techniques to deploy stealthy malware on Windows.

#OceanLotus #APTC00 #Cybersecurity #Malware #APT32

https://meterpreter.org/oceanlotus-apt-c-00-campaign/?utm_source=mastodon&utm_medium=jetpack_social

OceanLotus suspected of using PyPI to deliver ZiChatBot malware
#OceanLotus #ZiChatBot
https://securelist.com/oceanlotus-suspected-pypi-zichatbot-campaign/119603/

OceanLotus suspected of using PyPI to deliver ZiChatBot malware
#OceanLotus #ZiChatBot
https://securelist.com/oceanlotus-suspected-pypi-zichatbot-campaign/119603/

OceanLotus suspected of using PyPI to deliver ZiChatBot malware
#OceanLotus #ZiChatBot
https://securelist.com/oceanlotus-suspected-pypi-zichatbot-campaign/119603/

OceanLotus suspected of using PyPI to deliver ZiChatBot malware
#OceanLotus #ZiChatBot
https://securelist.com/oceanlotus-suspected-pypi-zichatbot-campaign/119603/

OceanLotus suspected of using PyPI to deliver ZiChatBot malware
#OceanLotus #ZiChatBot
https://securelist.com/oceanlotus-suspected-pypi-zichatbot-campaign/119603/

📰 Malicious PyPI Packages Use Zulip Chat App for C2 to Deploy 'ZiChatBot' Malware

🚨 Malicious PyPI packages found delivering 'ZiChatBot' malware. The campaign, linked to the OceanLotus APT, uses the Zulip chat app's APIs for stealthy C2 communication. #SupplyChainAttack #PyPI #Malware #OceanLotus

🔗 https://cyber.netsecops.io

OceanLotus Exploits PyPI to Deliver ZiChatBot Malware

Kaspersky's analysis uncovered a sneaky malware attack on PyPI, where OceanLotus hackers uploaded fake packages that looked like harmless libraries, tricking users into installing the ZiChatBot malware. The malicious packages, uploaded in July 2025, masqueraded as legitimate tools like uuid32-utils, colorinal, and termncolor.

https://osintsights.com/oceanlotus-exploits-pypi-to-deliver-zichatbot-malware?utm_source=mastodon&utm_medium=social

#Oceanlotus #Pypi #ZichatbotMalware #MalwareOperations #EmergingThreats

Advanced Persistent Threat Targeting Vietnamese Human Rights Defenders
#OceanLotus
https://www.huntress.com/blog/advanced-persistent-threat-targeting-vietnamese-human-rights-defenders

Advanced Persistent Threat Targeting Vietnamese Human Rights Defenders
#OceanLotus
https://www.huntress.com/blog/advanced-persistent-threat-targeting-vietnamese-human-rights-defenders

Advanced Persistent Threat Targeting Vietnamese Human Rights Defenders
#OceanLotus
https://www.huntress.com/blog/advanced-persistent-threat-targeting-vietnamese-human-rights-defenders

via: @campuscodi

QiAnXin published a report on the recent attacks of #OceanLotus (#APT32) that targeted Chinese organizations throughout 2021.

The group allegedly used 3 zero-day #vulns:

+1 in an unnamed antivirus product
+2 in an unnamed workstation management system. More here (in Chinese): https://mp.weixin.qq.com/s/pd6fUs5TLdBtwUHauclDOQ | #infosec #espionage #malware

via: @campuscodi

QiAnXin published a report on the recent attacks of #OceanLotus (#APT32) that targeted Chinese organizations throughout 2021.

The group allegedly used 3 zero-day #vulns:

+1 in an unnamed antivirus product
+2 in an unnamed workstation management system. More here (in Chinese): https://mp.weixin.qq.com/s/pd6fUs5TLdBtwUHauclDOQ | #infosec #espionage #malware

via: @campuscodi

QiAnXin published a report on the recent attacks of #OceanLotus (#APT32) that targeted Chinese organizations throughout 2021.

The group allegedly used 3 zero-day #vulns:

+1 in an unnamed antivirus product
+2 in an unnamed workstation management system. More here (in Chinese): https://mp.weixin.qq.com/s/pd6fUs5TLdBtwUHauclDOQ | #infosec #espionage #malware

Mac users warned of more Ocean Lotus malware targeted attacks https://grahamcluley.com/mac-users-warned-of-more-ocean-lotus-malware-targeted-attacks/ #oceanlotus #Malware #macOS

Вьетнамская APT-группа наряду с кибершпионскими операциями занялась майнингом #Вьетнам, #майнинг, #APT, #OceanLotus, #Microsoft https://www.securitylab.ru/news/514469.php https://twitter.com/SecurityLabnews/status/1333711194872553472/photo/1

Вьетнамская APT-группа наряду с кибершпионскими операциями занялась майнингом #Вьетнам, #майнинг, #APT, #OceanLotus, #Microsoft https://www.securitylab.ru/news/514469.php https://twitter.com/SecurityLabnews/status/1333711194872553472/photo/1

Хакеры используют службу WER в бесфайловых кибератаках #кибератака, #Malwarebytes, #OceanLotus https://www.securitylab.ru/news/512802.php https://twitter.com/SecurityLabnews/status/1313737082171523072/photo/1

Хакеры используют службу WER в бесфайловых кибератаках #кибератака, #Malwarebytes, #OceanLotus https://www.securitylab.ru/news/512802.php https://twitter.com/SecurityLabnews/status/1313737082171523072/photo/1