Mustang Panda Deploys Signed Windows Rootkit in Updated CoolClient Backdoor
Mustang Panda (aka HoneyMyte) has been observed deploying an updated version of the CoolClient backdoor that includes a signed Windows kernel-mode rootkit,…
Tag: cyber espionage
Apple Warns Users in 110 Countries of Mercenary Spyware Targeting
Apple has issued a fresh batch of threat notifications to customers in 110 countries, warning that they may be targeted by mercenary…
China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud
The China-linked threat actor known as Jewelbug has been observed conducting cyber espionage against governments and militaries while simultaneously running a cryptocurrency…
Jewelbug: China-Linked Hackers-for-Hire Group
Jewelbug is a China-based hackers-for-hire group that conducts cyber espionage against governments and militaries in the Middle East, Southeast Asia, and South…
New PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical Infrastructure
Afghan telecom providers and South Asian critical infrastructure organizations are the targets of a new campaign delivering a previously undocumented backdoor called…
APT36 (Transparent Tribe) Expands Targeting to Afghan Telecom and Indian Critical Infrastructure
APT36, also known as Transparent Tribe, is a Pakistan-aligned threat actor that has historically targeted government, military, and diplomatic organizations in India…
North Korean Remote Workers Infiltrating Government and Businesses: How to Expose Them Before Hiring
North Korean IT workers are increasingly infiltrating government agencies and businesses by applying for remote jobs, passing interviews, and obtaining legitimate credentials.…
Lazarus Group Exploits Windows Zero-Day CVE-2026-68820 in Operation Dream Job Attacks
The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched Microsoft Windows…
Researchers Pose as Fake Crypto Startup to Hire Suspected North Korean IT Workers
Security researchers created a fictitious cryptocurrency startup and hired three individuals they believe were North Korean IT operatives, as part of an…
Chrome Remote Desktop: Remote Access Tool Used by Operatives
Chrome Remote Desktop is a remote access tool that allows users to control computers remotely. A suspected North Korean operative installed it…