(Getty Images) New zero-day exploit targets Ivanti VPN product After Ivanti detected the activity, Mandiant says it found malware in impacted devices associated with a Chinese-linked threat group. 2 days ago By Matt Bracken
A hacker with China’s national flag in background. (Getty Images) PHP backdoor looks to be work of Chinese-linked APT group Known as Glutton, researchers at QiAnXin’s XLab believe Winnti is responsible for the malware. Dec 16, 2024 By Greg Otto
(Getty Images) Treasury sanctions Chinese cyber company, employee for 2020 global firewall attack The department’s Office of Foreign Assets Control said Guan Tianfeng used a zero-day exploit to deploy malware on 81,000 firewalls. Dec 10, 2024 By Matt Bracken
(Getty Images) Malware linked to Salt Typhoon used to hack telcos around the world A report from Trend Micro details the highly sophisticated ways Salt Typhoon carries out its operations. Nov 25, 2024 By Greg Otto
The U.S. Department of Justice is seen on June 20, 2023 in Washington, DC. (Photo by Kevin Dietsch/Getty Images) US charges Russian national for developing RedLine infostealer Maxim Rudometov, who is believed to reside in southern Russia, is not likely to be extradited. Oct 29, 2024 By Christian Vasquez
A screenshot of a video showing users of infostealer services. (Dutch National Police) Operation Magnus targets Redline, Meta infostealers Authorities say they've gained "full access" to the hackers' servers. Oct 28, 2024 By Christian Vasquez
The original stock picture (left) and an AI fake (right) used by a North Korean threat actor who posed as a U.S.-based software engineer and was hired by the cyber firm KnowBe4. (Photo credit: KnowBe4) Cyber firm KnowBe4 hired a fake IT worker from North Korea The security awareness training company said in a blog post that the software engineer used stolen U.S. credentials and an AI-enhanced photo. Jul 24, 2024 By Matt Bracken
Seizure notice announcing “Operation Endgame.” (Europol) Global police operation strikes against malware infrastructure ‘Operation Endgame’ targeted well-known malware variants used to facilitate ransomware and other serious cybercrime. May 30, 2024 By AJ Vicens
Photo of monitor while downloading a file from the “Internet to My Computer”. (spxChrome/Getty Images) Decade-old malware haunts Ukrainian police A virus dating to 2015 is still hitting targets in Ukraine, showing its enduring power. Apr 17, 2024 By AJ Vicens
People form a peace sign with candles ahead of a rally marking the eve of the second anniversary of Russia’s invasion of Ukraine, in front of the Reichstag, the building housing the Bundestag (German lower house of parliament) in Berlin on Feb. 23, 2024. (Photo by ODD ANDERSEN/AFP via Getty Images) German political party targeted by SVR-linked group in spearphishing campaign, Mandiant says The group may have been seeking insights on shifting European sentiments on Ukraine, threat analysts suggest. Mar 22, 2024 By Derek B. Johnson