NodeStealer Malware Targets Facebook 

CategoryDetailsThreat ActorsNodeStealer (Vietnamese threat actors); ClickFix (unattributed, including suspected Russian actors targeting Ukraine).Campaign OverviewNodeStealer targets…

T-Mobile Breached in Major Chinese Cyber-Attack on Telecoms

CategoryDetailsThreat ActorsSalt Typhoon (Chinese state-sponsored hacking group).Campaign OverviewLarge-scale cyber-espionage campaign targeting US and international telecom…

North Korean shell companies found impersonating US IT firms to fund missiles

CategoryDetailsThreat ActorsDPRK-affiliated groups impersonating US-based software and tech consulting businesses.Campaign OverviewNorth Korea uses fake IT…

Google takes down fake news sites, wire services run by Chinese influence operation

Topic Details Operation Details Google removed hundreds of domains running pro-China content, attributed to four…

  • APT
  • November 22, 2024
UK drinking water supplies disrupted by record number of undisclosed cyber incidents

Category Details Threat Actors Not explicitly named; likely a mix of cybercriminals and nation-state actors…

OSINT Updates for November 22 , 2024

https://twitter.com/SecAI_AI/status/1859770564296225267 https://twitter.com/ClefTheHacker/status/1859892350392422731 https://twitter.com/FalconFeedsio/status/1859820207201714499 https://twitter.com/cyberfeeddigest/status/1859868387976806582 https://twitter.com/cyberfeeddigest/status/1859876230989857234 https://twitter.com/DailyRansomware/status/1859872936619802914 https://twitter.com/jamessecuritytr/status/1859854138881999316 https://twitter.com/DailyRansomware/status/1859845914887704755

Lateral Movement on macOS: Unique and Popular Techniques and In-the-Wild Examples

Topic Details Introduction Explores macOS lateral movement techniques, including SSH key theft, Apple Remote Desktop,…

Microsoft shares latest intelligence on North Korean and Chinese threat actors at CYBERWARCON

Category Details Threat Actors DPRK (North Korea) actors: Sapphire Sleet and Ruby Sleet. China-based actor:…

Seeing Through a GLASSBRIDGE: Understanding the Digital Marketing Ecosystem Spreading Pro-PRC Influence Operations

Category Details Threat Actors GLASSBRIDGE (umbrella group), Shanghai Haixun Technology Co., Ltd. (Haixun), Times Newswire,…

Ransomware – Termite

CategoryDetailsThreat ActorsTermiteCampaign OverviewActive ransomware group engaging in extortion methods such as blackmail, double extortion, and…