14 article(s) in our index mention this organisation.
A sophisticated Italian attacker, known as GitHub user ‘ejejejdfbbebe’, has launched a campaign called ‘Canto Incognito’ targeting over 3,000 servers worldwide. The campaign leverages adversarial poetry to bypass securit…
A new malware family, dubbed PoeLLM, is targeting exposed AI and LLM infrastructure to expand a cryptocurrency mining botnet.
U.S. Senators Mark Warner and Ted Cruz have introduced a bill to create voluntary cybersecurity best practices for the telecommunications industry, aiming to address vulnerabilities exposed by the Salt Typhoon campaign,…
A multi-platform malware campaign, dubbed BambooToken, is leveraging the MQTT protocol to control Windows and Linux systems, originating from a Chinese threat actor. The malware, active since at least February 2023, util…
A Russian state-sponsored threat actor, linked to Midnight Blizzard (APT29/Cozy Bear) and operating under the designation GTG-20006, has been leveraging AI to continuously rebuild and evade malware detection. The group h…
The FBI has disrupted a Chinese-linked hacking infrastructure, QScan and QTRouter, operated by the group QTFY, which has been targeting U.S. critical infrastructure since 2018. These tools were used to steal data and con…
Lumen Technologies dramatically improved its exposure management program by reconciling data from over 40 disconnected systems, revealing a massive underestimation of its cyber assets – growing from approximately 17,000…
The FBI, in collaboration with industry partners including Google and Lumen, has seized hundreds of domains associated with NetNut, a residential proxy service operated by Alarum Technologies, following findings linking…
Google, in collaboration with the FBI and Lumen, has significantly reduced the size of the NetNut residential proxy network, which utilizes millions of home devices worldwide as relays for internet traffic. This network,…
ESET, in collaboration with Microsoft DCU and other partners, successfully disrupted the Amadey and Stealc botnets as part of Operation Endgame. These botnets, sold as a service on darknet forums, utilize a MaaS model wh…
A new botnet, named AryStinger, has been discovered compromising over 4,000 outdated D-Link routers worldwide, turning them into proxies for malicious traffic. The malware utilizes multiple vulnerabilities to perform sca…
A new Linux malware, dubbed Showboat, has been used in a campaign targeting a telecommunications provider in the Middle East since at least 2022. The malware, developed by a China-linked threat actor group known as Calyp…
A Chinese cyber-espionage group, known as Calypso (Red Lamassu), has been targeting telecommunications providers globally since mid-2022 with a dual-pronged malware campaign utilizing Showboat (Linux) and JMFBackdoor (Wi…
Russian military intelligence, operating under the ‘Forest Blizzard’ (APT28/Fancy Bear) moniker, has been conducting a sophisticated cyber espionage campaign targeting over 18,000 routers globally. The attackers exploite…
