Group-IB has uncovered a China-nexus cyber operation tracked as JadeProx, which has been targeting government, healthcare, and education organizations across Asia and…
JadeProx is a China-nexus cyber operation tracked by Group-IB, targeting government, healthcare, and education organizations across Asia and Latin America. It uses…
Cybersecurity researchers at SentinelOne SentinelLABS have disclosed details of sustained cyber espionage activity targeting Pakistani law enforcement organizations, including the Balochistan Police,…
A Chinese threat actor tracked as UAT-7810 is actively refining its bespoke malware to expand its Operational Relay Box (ORB) network by…
A suspected China-nexus threat activity cluster, codenamed Operation DragonReturn by Seqrite Labs, has been targeting Indian taxpayers, tax professionals, and corporate finance…
The JDY botnet is a covert network of compromised SOHO and IoT devices used for targeted scanning and service fingerprinting. It has…
Cybersecurity researchers at Lumen's Black Lotus Labs have identified a significant expansion of the JDY botnet, a covert network linked to China-nexus…
Cobalt Strike is a commercial penetration testing tool frequently abused by threat actors for command-and-control. In this campaign, it was used by…
Volt Typhoon is a Chinese state-sponsored hacking group that has been observed using the JDY botnet for reconnaissance and targeting of vulnerable…