Heimadal Security

DECEMBER 15, 2021

A fresh espionage hacking effort targeting Middle Eastern and Asian telecommunications and IT service companies was recently discovered. The operation has been running for six months, and it may have connections to the Iranian-backed actor MERCURY (aka MuddyWater, SeedWorm, or TEMP.Zagros).

Hacking 90

Hacking Telecommunications Phishing Cybersecurity 90

Security Affairs

JUNE 9, 2022

Researchers spotted a previously undocumented Chinese-speaking APT, tracked as Aoqin Dragon, targeting entities in Southeast Asia and Australia. The APT primary focus on cyberespionage against targets in Australia, Cambodia, Hong Kong, Singapore, and Vietnam. The APT has improved its malicious code over the time to avoid detection.

Malware 85

Malware DNS Encryption Education 85

Security Affairs

MARCH 4, 2019

Necurs botnet is currently the second largest spam botnet , it has been active since at least 2012 and was involved in massive campaigns spreading malware such as the Locky ransomware , the Scarab ransomware , and the Dridex banking Trojan. ” reads a blog post published by the firm. ” continues the blog post.

DNS 79

DNS Banking Advertising Ransomware 79

SecureList

APRIL 27, 2021

On March 2, Microsoft reported a new APT actor named HAFNIUM, exploiting four zero-days in Exchange Server in what they called “limited and targeted attacks” At the time, Microsoft claimed that, in addition to HAFNIUM, several other actors were exploiting them as well. Hopefully, further analysis will make things clearer.

Malware 138

Malware Spyware Government Social Engineering 138

SecureList

OCTOBER 26, 2021

This quarter we identified several malicious infection documents, droppers and implants that are typical of Gamaredon; and which may suggest an ongoing malicious campaign against the Ukrainian government, possibly active since May. This campaign was also covered by researchers at Zscaler in a blog post.

Malware 140

Malware Government Surveillance Spyware 140

Security Affairs

MAY 1, 2023

Russian APT group Nomadic Octopus hacked a Tajikistani carrier to spy on government officials and public service infrastructures. The cyberspies compromised a broad range of devices, from individuals’ computers to OT devices, as part of an operation tracked as Paperbug. ” continues th report.

Hacking 77

Hacking Telecommunications Government Firewall 77