WebDav-O targets Russsia
Chinese state-sponsored threat groups been behind a series of targeted attacks on the Russian federal executive authority. A virus known as "Webdav-O" that was discovered in the intrusions, with the…
Chinese Spyware on the Radar
A threat actor presumed to be of Chinese origin has been linked to a series of 10 attacks targeting Mongolia, Russia, Belarus, Canada, and the U.S. that involve the deployment…
Ghost Emperor targets Exchange Svrs
A new Chinese-speaking threat actor, tracked as GhostEmperor, that is targeting Microsoft Exchange vulnerabilities in attacks aimed at high-profile victims. GhostEmperor used a loading scheme that relies on a component…
APT 31 Into Limelight
French national cyber-security agency warned of an ongoing series of attacks against a large number of French organizations coordinated by the Chinese-backed APT31 hacking group. It appears from our investigations…
Chinese Spies Government Entities
Kaspersky researchers have revealed an ongoing and large-scale APT campaign with hundreds of victims from Southeast Asia, including Myanmar and the Philippines government entities. Tracked as LuminousMoth linked with HoneyMyte…
Mongolian CA Compromised
MonPass major CA appears to have been breached at least six months ago, with the attackers returning to a compromised public web server approximately eight times. The attackers backdoored installers…
Indigo Zebra APT
Governments in Afghanistan, Kyrgyzstan and Uzbekistan all receive state support from Chinese speaking highly persistent threat (APT) group, called Indigo Zebra detailed CPR. The group seems to have infiltrated Afghanistan…
Posted inCyberAttack
Redfoxtrot Oprns China
People’s Liberation Army (PLA) Unit 69010 is believed to have been behind a series of cyber-espionage campaigns dating back to 2014 that have focused on gathering military intelligence from neighboring…