Security Affairs

APRIL 20, 2023

The researchers from Google TAG are warning of Russia-linked threat actors targeting Ukraine with phishing campaigns. Russia-linked threat actors launched large-volume phishing campaigns against hundreds of users in Ukraine to gather intelligence and aimed at spreading disinformation, states Google’s Threat Analysis Group (TAG).

Phishing 87

Phishing Education Accountability Telecommunications 87

Security Affairs

MAY 3, 2022

China-linked Curious Gorge APT is targeting Russian government agencies, Google Threat Analysis Group (TAG) warns. Google Threat Analysis Group (TAG) reported that an APT group linked to China’s People’s Liberation Army Strategic Support Force (PLA SSF), tracked as Curious Gorge , is targeting Russian government agencies.

Manufacturing 109

Manufacturing Government Phishing Passwords 109

Security Affairs

NOVEMBER 28, 2021

North Korea-linked threat actors posed as Samsung recruiters in a spear-phishing campaign aimed at employees at South Korean security firms. Google TAG researchers reported that the same group, tracked as Zinc ,” also targeted security researchers in past campaigns. ” reads the Google Threat Horizons report. eXplorer.

Malware 124

Malware Phishing Antivirus Hacking 124

Malwarebytes

MARCH 18, 2022

The Google Threat Analysis Group (TAG) has shared their observations about a group of cybercriminals called Exotic Lily. Among these interested parties TAG found the Conti and Diavol ransomware groups. From the TAG blog we can learn that Exotic Lily was very much specialized. Initial access broker. Exotic Lily.

Ransomware 92

Ransomware Malware Social Engineering Media 92

eSecurity Planet

NOVEMBER 16, 2021

The researchers said they had seen Nobelium using HTML smuggling in a spear-phishing campaign in May, and more recently, observed it being used to deliver the banking Trojan Mekotio and the AsyncRAT/MJRAT and Trickbot malware used by attackers to get control of targeted devices and deliver such malware as ransomware. Trickbot Attacks.

Firewall 121

Firewall Ransomware Banking Malware 121

Security Boulevard

APRIL 26, 2022

In 2021, the main attack vector used by this threat actor was credential phishing attacks through emails, posing as Naver, the popular South Korean search engine and web portal. Some details about this campaign were published in this Korean blog, however they did not perform the threat attribution. Spear phishing emails distribution.

Phishing 52

Phishing DNS Cryptocurrency Accountability 52

Malwarebytes

OCTOBER 11, 2021

Some 14,000 people have been notified about a spear phish attempt looking to compromise accounts and access their files. He goes into more details in this thread: TAG sent a above average batch of government-backed security warnings yesterday. Google has more information on this type of warning over on its security blog.

Government 102

Government Phishing Accountability Passwords 102