Collaborate Disseminate
A politically motivated advanced persistent threat (APT) group has expanded its malware arsenal to include a new remote access trojan (RAT) in its espionage attacks aimed at Indian military and diplomatic entities.
Called CapraRAT by Trend Micro, the … Continue reading New CapraRAT Android Malware Targets Indian Government and Military Personnel
Systems hosting content pertaining to the National Games of China were successfully breached last year by an unnamed Chinese-language-speaking hacking group.
Cybersecurity firm Avast, which dissected the intrusion, said that the attackers gained acces… Continue reading Hackers Backdoored Systems at China’s National Games Just Before Competition
A Chinese advanced persistent threat (APT) group has been targeting Taiwanese financial institutions as part of a “persistent campaign” that lasted for at least 18 months.
The intrusions, whose primary intent was espionage, resulted in the deployment … Continue reading Chinese Hackers Target Taiwanese Financial Institutions with a new Stealthy Backdoor
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is urging federal agencies to secure their systems against an actively exploited security vulnerability in Windows that could be abused to gain elevated permissions on affected hosts.
To… Continue reading CISA Orders Federal Agencies to Patch Actively Exploited Windows Vulnerability
Users of the Argo continuous deployment (CD) tool for Kubernetes are being urged to push through updates after a zero-day vulnerability was found that could allow an attacker to extract sensitive information such as passwords and API keys.
The flaw, t… Continue reading New Argo CD Bug Could Let Hackers Steal Secret Info from Kubernetes Apps
Microsoft on Friday shared more of the tactics, techniques, and procedures (TTPs) adopted by the Russia-based Gamaredon hacking group to facilitate a barrage of cyber espionage attacks aimed at several entities in Ukraine over the past six months.
The… Continue reading Microsoft Uncovers New Details of Russian Hacking Campaign Targeting Ukraine
A threat actor, likely Chinese in origin, is actively attempting to exploit a zero-day vulnerability in the Zimbra open-source email platform as part of spear-phishing campaigns that commenced in December 2021.
The espionage operation — codenamed “Ema… Continue reading Hackers Exploited 0-Day Vulnerability in Zimbra Email Platform to Spy on Users
A now-patched security vulnerability in Apple iOS that was previously found to be exploited by Israeli company NSO Group was also separately weaponized by a different surveillance vendor named QuaDream to hack into the company’s devices.
The developme… Continue reading Another Israeli Firm, QuaDream, Caught Weaponizing iPhone Bug for Spyware
A number of India-based call centers and their directors have been indicted for their alleged role in placing tens of millions of scam calls aimed at defrauding thousands of American consumers.
The indictment charged Manu Chawla, Sushil Sachdeva, Nitin… Continue reading U.S. Authorities Charge 6 Indian Call Centers Scamming Thousands of Americans
The Russia-linked Gamaredon hacking group attempted to compromise an unnamed Western government entity operating in Ukraine last month amidst ongoing geopolitical tensions between the two countries.
Palo Alto Networks’ Unit 42 threat intelligence team… Continue reading Russian Gamaredon Hackers Targeted ‘Western Government Entity’ in Ukraine