China-linked group hacked Tibetan media and university sites to distribute Cobalt Strike paylad

CategoryDetailsThreat ActorsTAG-112 (linked to China), subgroup of Evasive PandaCampaign OverviewEspionage campaign targeting Tibetan media and…

Germany warns of potential cyber threats from Russia ahead of snap election

  Category Details Threat Actors Russian state-sponsored groups (e.g., APT28, APT29) and ransomware gangs; other…

Hamas-affiliated Threat Actor WIRTE Continues its Middle East Operations and Moves to Disruptive Activity

  Category Details Threat Actors WIRTE, affiliated with Hamas and likely part of the Gaza…

November 2024 Patch Tuesday: Four Critical and Three Zero-Days Among 158 Vulnerabilities Patched

Category Details Total Vulnerabilities 158 vulnerabilities Critical Vulnerabilities CVE-2024-43625, CVE-2024-49056, CVE-2024-43498, CVE-2024-43639 Fully Mitigated Vulnerability…

Cyberattack causes credit card readers to malfunction in Israel

Category Details Threat Actors Iran-linked hacker group, Hezbollah, and Politically-motivated hacktivists. Campaign Overview DDoS attack…

Ymir: New Stealthy Ransomware in the Wild

Category Details Threat Actors Unknown, but associated with access brokers and ransomware groups. Campaign Overview…

OSINT Updates for November 8, 2024

https://twitter.com/Unit42_Intel/status/1854550444778881160 https://twitter.com/RakeshKrish12/status/1854775107371028965 https://twitter.com/P4nd3m1cb0y/status/1854661858491302139 https://twitter.com/Gootloader/status/1854533704057594108 https://twitter.com/KrakenLabs_Team/status/1854476333759271105

Understanding the DuckTail Threat Actor’s Recent Attacks on Middle East

CategoryDetailsThreat ActorsDuckTail (Vietnam-based)Campaign OverviewTargeting digital marketing firms, primarily in the Middle East, using phishing, social…

Dark Web Profile: Tropic Trooper (APT23)

FieldDetailsThreat ActorsTropic Trooper (APT23), also known as Pirate Panda, Iron, KeyBoy, Bronze Hobart, Earth CentaurCampaign…

North Korea allegedly targeting crypto businesses with Mac-focused malware

CategoryDetailsThreat ActorsBlueNoroff, a subgroup of Lazarus, attributed to North Korea's Reconnaissance General Bureau (RGB).Campaign Overview"Hidden…