#targetedattacks — Public Fediverse posts

Cybercriminals Impersonate IT Personnel in Targeted Attacks

Cybercriminals are now masquerading as IT personnel to launch targeted attacks, with the FBI warning that law firms and professional sectors are prime targets. This new tactic allows groups like the Silent Ransom Group to swiftly access and exfiltrate sensitive data, often without encrypting systems.

https://osintsights.com/cybercriminals-impersonate-it-personnel-in-targeted-attacks?utm_source=mastodon&utm_medium=social

#Extortion #TargetedAttacks #SilentRansomGroup #DataExfiltration #Impersonation

Leaked Windows Zero-Days Exploited in Targeted Attacks

Cyber attackers are exploiting newly disclosed Windows flaws in targeted attacks, allowing them to gain alarming levels of system control before organizations can patch the vulnerabilities. This alarming window of opportunity leaves defenders scrambling to respond.

https://osintsights.com/leaked-windows-zero-days-exploited-in-targeted-attacks?utm_source=mastodon&utm_medium=social

#WindowsZeroDays #ExploitedVulnerabilities #EmergingThreats #PrivilegeEscalation #TargetedAttacks

Adobe Reader Zero-Day Exploited in Targeted Attacks Since December

A previously unknown zero-day vulnerability in Adobe Reader has been exploited in targeted attacks since December, using maliciously crafted PDF documents to quietly turn trusted files into stealthy threats. This highly sophisticated exploit raises serious questions about the security of everyday file formats and our trust in them.

https://osintsights.com/adobe-reader-zero-day-exploited-in-targeted-attacks-since-december?utm_source=mastodon&utm_medium=social

#ZeroDay #AdobeReader #Exploit #TargetedAttacks #EmergingThreats

Thursday, February 5, 2026

https://activitypub.writeworks.uk/2026/02/thursday-february-5-2026/

Thursday, February 5, 2026

https://activitypub.writeworks.uk/2026/02/thursday-february-5-2026/

Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824 – Source: securelist.com https://ciso2ciso.com/evolution-of-the-pipemagic-backdoor-from-the-ransomexx-incident-to-cve-2025-29824-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Targetedattacks #vulnerabilities #Windowsmalware #GReATresearch #securelistcom #ransomware #PipeMagic #backdoor #Malware #Trojan

Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824 – Source: securelist.com https://ciso2ciso.com/evolution-of-the-pipemagic-backdoor-from-the-ransomexx-incident-to-cve-2025-29824-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Targetedattacks #vulnerabilities #Windowsmalware #GReATresearch #securelistcom #ransomware #PipeMagic #backdoor #Malware #Trojan

Cobalt Strike Beacon delivered via GitHub and social media – Source: securelist.com https://ciso2ciso.com/cobalt-strike-beacon-delivered-via-github-and-social-media-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Targetedattacks #cyberespionage #DLLsideloading #Socialnetworks #Windowsmalware #securelistcom #CobaltStrike #DLLhijacking #shellcode #research #Malware #GitHub #Trojan

Cobalt Strike Beacon delivered via GitHub and social media – Source: securelist.com https://ciso2ciso.com/cobalt-strike-beacon-delivered-via-github-and-social-media-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Targetedattacks #cyberespionage #DLLsideloading #Socialnetworks #Windowsmalware #securelistcom #CobaltStrike #DLLhijacking #shellcode #research #Malware #GitHub #Trojan

The SOC files: Rumble in the jungle or APT41’s new target in Africa – Source: securelist.com https://ciso2ciso.com/the-soc-files-rumble-in-the-jungle-or-apt41s-new-target-in-africa-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #CyberSecurityNews #Targetedattacks #DLLsideloading #securelistcom #CobaltStrike #DLLhijacking #TIandIRposts #Incidents #APT #SOC

The SOC files: Rumble in the jungle or APT41’s new target in Africa – Source: securelist.com https://ciso2ciso.com/the-soc-files-rumble-in-the-jungle-or-apt41s-new-target-in-africa-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #CyberSecurityNews #Targetedattacks #DLLsideloading #securelistcom #CobaltStrike #DLLhijacking #TIandIRposts #Incidents #APT #SOC

Rumble in the jungle: APT41’s new target in Africa – Source: securelist.com https://ciso2ciso.com/rumble-in-the-jungle-apt41s-new-target-in-africa-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #CyberSecurityNews #Targetedattacks #DLLsideloading #securelistcom #CobaltStrike #DLLhijacking #TIandIRposts #Incidents #APT #SOC

Rumble in the jungle: APT41’s new target in Africa – Source: securelist.com https://ciso2ciso.com/rumble-in-the-jungle-apt41s-new-target-in-africa-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #CyberSecurityNews #Targetedattacks #DLLsideloading #securelistcom #CobaltStrike #DLLhijacking #TIandIRposts #Incidents #APT #SOC

GhostContainer backdoor: malware compromising Exchange servers of high-value organizations in Asia – Source: securelist.com https://ciso2ciso.com/ghostcontainer-backdoor-malware-compromising-exchange-servers-of-high-value-organizations-in-asia-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #MicrosoftExchange #Targetedattacks #GhostContainer #GReATresearch #securelistcom #opensource #backdoor #Malware

GhostContainer backdoor: malware compromising Exchange servers of high-value organizations in Asia – Source: securelist.com https://ciso2ciso.com/ghostcontainer-backdoor-malware-compromising-exchange-servers-of-high-value-organizations-in-asia-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #MicrosoftExchange #Targetedattacks #GhostContainer #GReATresearch #securelistcom #opensource #backdoor #Malware

Batavia spyware steals data from Russian organizations – Source: securelist.com https://ciso2ciso.com/batavia-spyware-steals-data-from-russian-organizations-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #MicrosoftWindows #Targetedattacks #Windowsmalware #securelistcom #spearphishing #PowerShell #datatheft #Malware #Spyware #VBS

Batavia spyware steals data from Russian organizations – Source: securelist.com https://ciso2ciso.com/batavia-spyware-steals-data-from-russian-organizations-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #MicrosoftWindows #Targetedattacks #Windowsmalware #securelistcom #spearphishing #PowerShell #datatheft #Malware #Spyware #VBS

State of ransomware in 2025 – Source: securelist.com https://ciso2ciso.com/state-of-ransomware-in-2025-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #Crossplatformmalware #CyberSecurityNews #MalwareStatistics #Financialthreats #MicrosoftWindows #Targetedattacks #DataEncryption #securelistcom #Publications #ransomware #Lockbit #BYOVD #RaaS #APT #LLM #AI

State of ransomware in 2025 – Source: securelist.com https://ciso2ciso.com/state-of-ransomware-in-2025-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #Crossplatformmalware #CyberSecurityNews #MalwareStatistics #Financialthreats #MicrosoftWindows #Targetedattacks #DataEncryption #securelistcom #Publications #ransomware #Lockbit #BYOVD #RaaS #APT #LLM #AI

Operation SyncHole: Lazarus APT goes back to the well – Source: securelist.com https://ciso2ciso.com/operation-synchole-lazarus-apt-goes-back-to-the-well-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #zerodayvulnerabilities #APT(Targetedattacks) #MalwareDescriptions #MalwareTechnologies #Wateringholeattacks #CyberSecurityNews #Supplychainattack #Targetedattacks #infrastructure #securelistcom #MITREATT&CK #APTreports #Lazarus #Malware #APT

Operation SyncHole: Lazarus APT goes back to the well – Source: securelist.com https://ciso2ciso.com/operation-synchole-lazarus-apt-goes-back-to-the-well-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #zerodayvulnerabilities #APT(Targetedattacks) #MalwareDescriptions #MalwareTechnologies #Wateringholeattacks #CyberSecurityNews #Supplychainattack #Targetedattacks #infrastructure #securelistcom #MITREATT&CK #APTreports #Lazarus #Malware #APT

Russian organizations targeted by backdoor masquerading as secure networking software updates – Source: securelist.com https://ciso2ciso.com/russian-organizations-targeted-by-backdoor-masquerading-as-secure-networking-software-updates-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #CyberSecurityNews #Targetedattacks #securelistcom #Incidents #backdoor #Malware #Trojan

Russian organizations targeted by backdoor masquerading as secure networking software updates – Source: securelist.com https://ciso2ciso.com/russian-organizations-targeted-by-backdoor-masquerading-as-secure-networking-software-updates-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #CyberSecurityNews #Targetedattacks #securelistcom #Incidents #backdoor #Malware #Trojan

Head Mare and Twelve join forces to attack Russian entities – Source: securelist.com https://ciso2ciso.com/head-mare-and-twelve-join-forces-to-attack-russian-entities-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #CyberSecurityNews #Crimewarereports #Targetedattacks #securelistcom #Hacktivists #ransomware #backdoor #HeadMare #Lockbit #Trojan #Twelve #Babuk #TTPs

Head Mare and Twelve join forces to attack Russian entities – Source: securelist.com https://ciso2ciso.com/head-mare-and-twelve-join-forces-to-attack-russian-entities-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #CyberSecurityNews #Crimewarereports #Targetedattacks #securelistcom #Hacktivists #ransomware #backdoor #HeadMare #Lockbit #Trojan #Twelve #Babuk #TTPs

Incident response analyst report 2024 – Source: securelist.com https://ciso2ciso.com/incident-response-analyst-report-2024-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #CyberSecurityNews #Industrialthreats #IncidentResponse #Securityservices #Targetedattacks #securelistcom #TIandIRposts #MITREATT&CK #ransomware #Fortinet #Lockbit #Babuk #SOC

Incident response analyst report 2024 – Source: securelist.com https://ciso2ciso.com/incident-response-analyst-report-2024-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #CyberSecurityNews #Industrialthreats #IncidentResponse #Securityservices #Targetedattacks #securelistcom #TIandIRposts #MITREATT&CK #ransomware #Fortinet #Lockbit #Babuk #SOC

SideWinder targets the maritime and nuclear sectors with an updated toolset – Source: securelist.com https://ciso2ciso.com/sidewinder-targets-the-maritime-and-nuclear-sectors-with-an-updated-toolset-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Targetedattacks #Defenseevasion #Windowsmalware #securelistcom #spearphishing #APTreports #JavaScript #SideWinder #shellcode #Malware #.NET #APT #HTA

EAGERBEE, with updated and novel components, targets the Middle East – Source: securelist.com https://ciso2ciso.com/eagerbee-with-updated-and-novel-components-targets-the-middle-east-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Targetedattacks #cyberespionage #securelistcom #CoughingDown #APTreports #backdoor #EagerBee #Malware #APT

EAGERBEE, with updated and novel components, targets the Middle East – Source: securelist.com https://ciso2ciso.com/eagerbee-with-updated-and-novel-components-targets-the-middle-east-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Targetedattacks #cyberespionage #securelistcom #CoughingDown #APTreports #backdoor #EagerBee #Malware #APT

BellaCPP: Discovering a new BellaCiao variant written in C++ – Source: securelist.com https://ciso2ciso.com/bellacpp-discovering-a-new-bellaciao-variant-written-in-c-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Targetedattacks #securelistcom #APTreports #BellaCiao #Malware #APT #ssh

BellaCPP: Discovering a new BellaCiao variant written in C++ – Source: securelist.com https://ciso2ciso.com/bellacpp-discovering-a-new-bellaciao-variant-written-in-c-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Targetedattacks #securelistcom #APTreports #BellaCiao #Malware #APT #ssh

Careto is back: what’s new after 10 years of silence? – Source: securelist.com https://ciso2ciso.com/careto-is-back-whats-new-after-10-years-of-silence-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #CyberSecurityNews #Targetedattacks #cyberespionage #securelistcom #APTreports #backdoor #Malware #Careto #APT

Careto is back: what’s new after 10 years of silence? – Source: securelist.com https://ciso2ciso.com/careto-is-back-whats-new-after-10-years-of-silence-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #CyberSecurityNews #Targetedattacks #cyberespionage #securelistcom #APTreports #backdoor #Malware #Careto #APT

Advanced threat predictions for 2025 – Source: securelist.com https://ciso2ciso.com/advanced-threat-predictions-for-2025-source-securelist-com/ #Vulnerabilitiesandexploits #KasperskySecurityBulletin #rssfeedpostgeneratorecho #ArtificialIntelligence #APT(Targetedattacks) #CyberSecurityNews #Supplychainattack #internetofthings #machinelearning #Targetedattacks #GoogleAndroid #securelistcom #Triangulation #Hacktivists #deepfakes #AppleiOS #backdoor #botnets #Drivers #BYOVD #APT #XZ

Advanced threat predictions for 2025 – Source: securelist.com https://ciso2ciso.com/advanced-threat-predictions-for-2025-source-securelist-com/ #Vulnerabilitiesandexploits #KasperskySecurityBulletin #rssfeedpostgeneratorecho #ArtificialIntelligence #APT(Targetedattacks) #CyberSecurityNews #Supplychainattack #internetofthings #machinelearning #Targetedattacks #GoogleAndroid #securelistcom #Triangulation #Hacktivists #deepfakes #AppleiOS #backdoor #botnets #Drivers #BYOVD #APT #XZ

APT trends report Q1 2024 – Source: securelist.com https://ciso2ciso.com/apt-trends-report-q1-2024-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #CyberSecurityNews #Targetedattacks #cyberespionage #MobileMalware #securelistcom #Hacktivists #APTreports #backdoor #Kimsuky #Trojan #APT

APT trends report Q1 2024 – Source: securelist.com https://ciso2ciso.com/apt-trends-report-q1-2024-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #CyberSecurityNews #Targetedattacks #cyberespionage #MobileMalware #securelistcom #Hacktivists #APTreports #backdoor #Kimsuky #Trojan #APT

Exploits and vulnerabilities in Q1 2024 – Source: securelist.com https://ciso2ciso.com/exploits-and-vulnerabilities-in-q1-2024-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #VulnerabilityStatistics #CyberSecurityNews #MicrosoftExchange #MicrosoftWindows #MicrosoftOffice #Targetedattacks #vulnerabilities #securelistcom #Publications #backdoor #browser #LINUX

Exploits and vulnerabilities in Q1 2024 – Source: securelist.com https://ciso2ciso.com/exploits-and-vulnerabilities-in-q1-2024-source-securelist-com/ #Vulnerabilitiesandexploits #rssfeedpostgeneratorecho #VulnerabilityStatistics #CyberSecurityNews #MicrosoftExchange #MicrosoftWindows #MicrosoftOffice #Targetedattacks #vulnerabilities #securelistcom #Publications #backdoor #browser #LINUX

Managed Detection and Response in 2023 – Source: securelist.com https://ciso2ciso.com/managed-detection-and-response-in-2023-source-securelist-com/ #InternalThreatsStatistics #rssfeedpostgeneratorecho #Securitytechnology #CyberSecurityNews #Industrialthreats #Securityservices #Internalthreats #Targetedattacks #securelistcom #TIandIRposts #mdr #SOC

Managed Detection and Response in 2023 – Source: securelist.com https://ciso2ciso.com/managed-detection-and-response-in-2023-source-securelist-com/ #InternalThreatsStatistics #rssfeedpostgeneratorecho #Securitytechnology #CyberSecurityNews #Industrialthreats #Securityservices #Internalthreats #Targetedattacks #securelistcom #TIandIRposts #mdr #SOC

ToddyCat is making holes in your infrastructure – Source: securelist.com https://ciso2ciso.com/toddycat-is-making-holes-in-your-infrastructure-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #CyberSecurityNews #Targetedattacks #cyberespionage #securelistcom #APTreports #datatheft #ToddyCat #WhatsApp #APT #ssh #VPN

ToddyCat is making holes in your infrastructure – Source: securelist.com https://ciso2ciso.com/toddycat-is-making-holes-in-your-infrastructure-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #CyberSecurityNews #Targetedattacks #cyberespionage #securelistcom #APTreports #datatheft #ToddyCat #WhatsApp #APT #ssh #VPN

Assessing the Y, and How, of the XZ Utils incident – Source: securelist.com https://ciso2ciso.com/assessing-the-y-and-how-of-the-xz-utils-incident-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #CyberSecurityNews #socialengineering #Supplychainattack #Targetedattacks #securelistcom #Incidents #LINUX

Assessing the Y, and How, of the XZ Utils incident – Source: securelist.com https://ciso2ciso.com/assessing-the-y-and-how-of-the-xz-utils-incident-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #CyberSecurityNews #socialengineering #Supplychainattack #Targetedattacks #securelistcom #Incidents #LINUX

DuneQuixote campaign targets Middle Eastern entities with “CR4T” malware – Source: securelist.com https://ciso2ciso.com/dunequixote-campaign-targets-middle-eastern-entities-with-cr4t-malware-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Targetedattacks #securelistcom #APTreports #MiddleEast #backdoor #Dropper #Malware #Trojan #APT

DuneQuixote campaign targets Middle Eastern entities with “CR4T” malware – Source: securelist.com https://ciso2ciso.com/dunequixote-campaign-targets-middle-eastern-entities-with-cr4t-malware-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Targetedattacks #securelistcom #APTreports #MiddleEast #backdoor #Dropper #Malware #Trojan #APT

Using the LockBit builder to generate targeted ransomware – Source: securelist.com https://ciso2ciso.com/using-the-lockbit-builder-to-generate-targeted-ransomware-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #IncidentResponse #Targetedattacks #DataEncryption #Windowsmalware #securelistcom #ransomware #Lockbit #Malware #Trojan

Using the LockBit builder to generate targeted ransomware – Source: securelist.com https://ciso2ciso.com/using-the-lockbit-builder-to-generate-targeted-ransomware-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #IncidentResponse #Targetedattacks #DataEncryption #Windowsmalware #securelistcom #ransomware #Lockbit #Malware #Trojan