4th November – Threat Intelligence Report

Category Details Top Attacks and Breaches - Free (France): Cyberattack exposed personal data of up…

NVIDIA shader out-of-bounds and eleven LevelOne router vulnerabilities

Category Details Threat Actors Not specified. Campaign Overview Discovery of five Nvidia out-of-bounds access vulnerabilities…

Stonefly: Extortion Attacks Continue Against U.S. Targets

  CategoryDetailsThreat Actors- Stonefly group (also known as Andariel, APT45, Silent Chollima, Onyx Sleet)- A…

  • APT
  • October 2, 2024
Bulbature, beneath the waves of GobRAT

Category Details Threat Actors Likely Chinese origin, as inferred from traces and victimology Campaign Overview…

Smuggler’s Gambit: Uncovering HTML Smuggling Adversary in the Middle Tradecraft | Huntress

CategoryDetailsThreat ActorsUnknown; potentially a new Phishing-as-a-Service framework.Campaign OverviewMass phishing campaign combining HTML smuggling, Iframe injection,…

Avast Q1/2024 Threat Report

Category Details Threat Actors Unknown actors targeting XZ/liblzma; Lazarus Group; operators of Twizt, DDosia, and…

LightSpy Malware Variant Targeting macOS | Huntress

Category Details Threat Actors Unknown actors using LightSpy framework Campaign Overview Analysis of a macOS…

ToddyCat is making holes in your infrastructure

Category Details Threat Actors ToddyCat (APT group) Campaign Overview Attackers target governmental organizations, some defense-related,…

DuneQuixote campaign targets Middle Eastern entities with “CR4T” malware

Category Details Threat Actors Unnamed group behind the "DuneQuixote" campaign Campaign Overview Targets government entities…

Lazarus and the FudModule Rootkit: Beyond BYOVD with an Admin-to-Kernel Zero-Day

CategoryDetailsThreat ActorsLazarus GroupCampaign OverviewExploitation of a zero-day vulnerability in the appid.sys AppLocker driver to gain…