6 article(s) in our index mention this organisation.
A multi-platform malware campaign, dubbed BambooToken, is leveraging the MQTT protocol to control Windows and Linux systems, originating from a Chinese threat actor. The malware, active since at least February 2023, util…
A Russian state-sponsored threat actor, linked to Midnight Blizzard (APT29/Cozy Bear) and operating under the designation GTG-20006, has been leveraging AI to continuously rebuild and evade malware detection. The group h…
The FBI has disrupted a Chinese-linked hacking infrastructure, QScan and QTRouter, operated by the group QTFY, which has been targeting U.S. critical infrastructure since 2018. These tools were used to steal data and con…
The FBI, in collaboration with Google and Black Lotus Labs, successfully disrupted a large-scale Chinese phishing-as-a-service operation called Outsider Enterprise. This operation utilized AI to generate and distribute p…
This article details the discovery of "Showboat" (kworker), a Linux post-exploitation framework being shared among Chinese Advanced Persistent Threat (APT) groups, primarily Calypso and Red Lamassu. The malware has been…
Russian military intelligence, operating under the ‘Forest Blizzard’ (APT28/Fancy Bear) moniker, has been conducting a sophisticated cyber espionage campaign targeting over 18,000 routers globally. The attackers exploite…
