The hacking group known as Patchwork—also referred to as Dropping Elephant and Maha Grass—has once again come under scrutiny following a series of targeted attacks against Pakistan’s defense institutions. In its latest campaign, the...
The hacking group known as Transparent Tribe has launched a new wave of cyber-espionage operations targeting government bodies, research institutions, and strategically important organizations in India. The attackers’ primary weapon is yet another variant...
An advertisement has surfaced on the BreachForums forum offering a large data archive for sale. According to the seller, operating under the alias “888,” the dataset is linked to Bitbucket repositories used in projects...
Cyber-espionage attributed to the Chinese group HoneyMyte—also known as Mustang Panda and Bronze President—has reached a new level. Researchers have observed the deployment of an advanced version of the ToneShell malware, concealed by a...
South Korea’s Ministry of Science and ICT has stated that Korea Telecom (KT) may have exposed its subscribers to risk for years due to poorly secured home mini base stations. According to the ministry,...
As part of a large-scale malware campaign dubbed Operation Artemis, the North Korean hacking group APT37—also known as ScarCruft—employed sophisticated attack techniques leveraging South Korea’s HWP word processor and DLL side-loading. The operation targeted...
The Excel format—long regarded as a harmless office staple—is increasingly being exploited as an entry point for cyberattacks. At the center of this trend are XLL files, specialized Excel add-ins that are, in reality,...
The Chinese hacking group known as Evasive Panda (also tracked as Bronze Highland, Daggerfly, and StormBamboo) carried out one of the most sophisticated and long-running cyber campaigns of recent years, silently infecting victim systems...
After nearly five years of apparent dormancy, the Iranian threat group Infy—also known as Prince of Persia—has resurfaced. Security researchers at SafeBreach have identified a new campaign by this long-standing cyber-espionage operation, which has...
Former Israeli Prime Minister Naftali Bennett has acknowledged that his Telegram account was accessed without authorization, even though his device itself was not compromised. He made the statement after reports emerged alleging that his...