Tag Archives: Advanced Persistent Threats
PhantomCore Backdoor Exploits TrueConf Server Vulnerabilities
A targeted cyberattack campaign exploits TrueConf Server flaws to distribute trojanized installers containing the PhantomCore backdoor and PhantomGraph RAT. Continue reading
UNC6671 Vishing Campaign Targets Major Wall Street Financial Firms
Google Threat Intelligence uncovers a massive UNC6671 vishing campaign targeting Wall Street financial firms using advanced help desk social engineering. Continue reading
Laundry Bear Exploits OWA Vulnerability in Half-Click Phishing Campaign
Russian threat actor Laundry Bear is exploiting an OWA vulnerability using a stealthy half-click phishing campaign to harvest mailbox data. Continue reading
Laundry Bear Zero-Click Zimbra Phishing Campaign Warned by CISA
A joint cybersecurity advisory highlights the Laundry Bear zero-click Zimbra phishing campaign targeting Western infrastructure using CVE-2025-66376. Continue reading
Laundry Bear APT Exploits Zimbra Zero-Day to Steal Passwords and 2FA Codes
A joint cybersecurity advisory warns that the Russian APT Laundry Bear is exploiting a Zimbra zero-day vulnerability to steal saved passwords and 2FA recovery codes. Continue reading
Starland RAT Malware: Russian Hackers Exploit Trojanized Installers
Discover how Russian hackers are distributing the novel Starland RAT through trojanized Zoom and Webex installers in a sophisticated cyber campaign. Continue reading
Blockchain Malware Linked to 300,000+ Compromised Credentials
A sophisticated new blockchain malware strain has compromised over 300,000 credentials, bypassing traditional defenses by hosting infrastructure on a public ledger. Continue reading
Industrial Device Security at Risk: 5,000+ PLCs Exposed to Iranian APTs
New Censys research reveals over 5,000 exposed Rockwell Automation PLCs, highlighting critical failures in industrial device security and ongoing threats from Iranian-linked APTs. Continue reading
Critical Infrastructure Security Alert: Iranian APTs Targeting PLCs
Federal agencies warn of Iranian APTs targeting Rockwell Automation PLCs, highlighting urgent critical infrastructure security risks to U.S. water and energy sectors. Continue reading