RedAlpha Cyber Espionage C2

RedAlpha Cyber Espionage C2

The RedAlpha APT group, linked to the Chinese state, has been spying organizations through massive phishing campaigns RedAlpha specializes in mass credential-harvesting, which it accomplishes via convincing phishing emails with…
Tropic Trooper New Espionage Campaign

Tropic Trooper New Espionage Campaign

Researchers have spotted a new campaign linked with the Chinese hacking group, Tropic Trooper. The campaign used the Nimbda loader and a new variant of the Yahoyah trojan. The attackers…
Bronze Light Threat Group in Action

Bronze Light Threat Group in Action

A China-linked state-sponsored hacking group was observed deploying various ransomware families to hide the true intent of its attacks. The threat group dubbed Bronze light started using the HUI Loader…
Gallium APT Uses Pingpull malware

Gallium APT Uses Pingpull malware

Unit 42  from Palo Alto discovered a new, difficult-to-detect remote-access malware used by the Gallium advanced persistent threat group. The Gallium APT group is believed to be a Chinese state-sponsored…
Twisted Panda in action against Russia

Twisted Panda in action against Russia

Chinese state-sponsored hackers are believed to have attacked Russian defense research organizations with malware, as part of a long-running espionage campaign. Check Point Software researchers attributed the campaign with high…
Mustang Panda Uses New Hodur Malware

Mustang Panda Uses New Hodur Malware

A China-based APT known as Mustang Panda is linked to an ongoing cyber-espionage campaign using PlugX trojan for remote access on infected machines. ESET called the new version Hodur because…