#cyberespionage

SparroWocky Backdoor Targets Latin American Governments

China-linked FamousSparrow deployed SparroWocky backdoor against Latin American governments for espionage, using DLL sideloading and stealth techniques.

Daily CyberSecurity

Cambodia Malware Campaign Uses PNG Files to Deliver SparkRAT

A Cambodia malware campaign hides SparkRAT in PNG files and abuses a vulnerable driver to kill antivirus, Acronis TRU reports.

Daily CyberSecurity

APT42 TAMECAT Malware Grows with AI-Assisted Phishing

APT42 TAMECAT malware now blends AI-assisted phishing with cloud C2 to steal credentials from defense and nuclear-sector targets.

Information Security News

Iranian Cyber Threat Landscape: Espionage and Covert Access

Discover how Iranian hackers maintain covert, long-term access to critical systems for espionage, influence operations, and potential disruption.

Daily CyberSecurity

GoSerpent Backdoor Drives a Patient Cyber Espionage Campaign Against Southeast Asian Governments

GoSerpent backdoor drives a patient cyber espionage campaign against Southeast Asian governments, stealing files and credentials since at least 2021.

Information Security News

HollowGraph Malware Exploits Microsoft 365 Calendars

Discover how the HollowGraph malware exploits Microsoft 365 calendars for C2 communication and data exfiltration in targeted espionage attacks.

Daily CyberSecurity

Project CAV3RN Hides Its C2 in Outlook Calendar Events to Spy on Israel

Kaspersky details Project CAV3RN, an OilRig-linked cyberespionage framework. Its new module hides C2 in Outlook calendar events, with DNS AAAA fallback.

Daily CyberSecurity

HOLLOWGRAPH Malware Hides Command-and-Control in Microsoft 365 Calendars

HOLLOWGRAPH malware turns Microsoft 365 calendars into covert C2 through Microsoft Graph API abuse. Group-IB links it to the Cavern framework.

Daily CyberSecurity

China and India Cyberespionage Converge on Pakistani Law Enforcement

SentinelLABS found Chinese cyberespionage and India-nexus actors converging on Pakistani law enforcement, hitting Balochistan Police records and citizens.

Daily CyberSecurity

UNK_MassTraction Exploits Roundcube Webmail to Hit University Physics Departments

UNK_MassTraction, a suspected China-aligned actor, exploits Roundcube webmail flaws to steal credentials and deploy the VShell backdoor at universities.

Russia Hacks Doorbell Cameras To Spy On NATO Bases - Slashdot

Dutch intelligence agencies say Russian hackers have been hijacking unsecured internet-connected cameras, including likely doorbell and security cameras, to spy on NATO military bases and transport routes used to move weapons to Ukraine. "Organisations with IP [internet protocol] cameras on these ro...

Hackers exploit Roundcube flaw to spy on academic researchers

A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal credentials and deploy backdoor malware.

Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials