Tag: Cyber Espionage

Acronis has uncovered two cyber espionage campaigns by Mustang Panda targeting Indian government and hydropower organizations using new malware and Zoho WorkDrive as a command and control channel.

Ukraine's SSU and FBI have uncovered a long running Russian intelligence phishing campaign targeting messaging app users, including government officials, military personnel, politicians, and activists across Ukraine, Europe, and the United States.

Palo Alto Networks Unit 42 has uncovered the TinyRCT backdoor used by Chinese speaking threat actor CL STA 1062 to target government organizations and critical infrastructure across Southeast Asia.

Google uncovers a China linked cyber espionage campaign that abused Google Workspace rules to steal sensitive research and defense emails from organizations across United States and Canada.

Cybersecurity researchers uncover new Windows variants of China linked SprySOCKS malware featuring driver based stealth, TCP traffic diversion, and targeting organizations across multiple countries including Pakistan.

Cybersecurity researchers have uncovered OP-512, a newly identified espionage focused threat cluster targeting Microsoft IIS servers using a custom web shell framework linked with moderate to high confidence to China.

Russian linked hacking group Gamaredon has exploited a WinRAR vulnerability to deploy GammaWorm and GammaSteel malware targeting Ukraine, according to cybersecurity firm Sekoia.

North Korean threat actor Kimsuky has intensified cyberattacks targeting South Korean military and corporate organizations, deploying HTTPSpy malware, HelloDoor, and abusing VS Code tunneling for covert access.

Cybersecurity researchers have uncovered Showboat, a Linux malware targeting a Middle East telecom provider, featuring SOCKS5 proxy capabilities and links to China affiliated threat activity clusters.

Palo Alto Networks reports active exploitation of PAN OS CVE-2026-0300 allowing root level RCE, with espionage activity linked to suspected state sponsored threat cluster CL STA 1132.

Chinese national Xu Zewei linked to Silk Typhoon hacking group has been sacked and extradited from Italy to United States over cyberattacks targeting COVID research systems and Microsoft Exchange vulnerabilities.

Researchers have identified Lotus Wiper, a destructive malware targeting Venezuela’s energy sector, capable of wiping systems, deleting recovery mechanisms, and disabling infrastructure through multi stage batch scripts and disk overwriting techniques.