Trojanized ESET Installers Drop Kalambur Backdoor in Phishing Attacks on Ukraine
Nov 06, 2025Ravie LakshmananMalware / Vulnerability A previously unknown threat activity cluster has been observed impersonating Slovak cybersecurity company ESET...
cluster
Mysterious ‘SmudgedSerpent’ Hackers Target U.S. Policy Experts Amid Iran–Israel Tensions
Nov 05, 2025Ravie LakshmananCybersecurity / Cyber Espionage A never-before-seen threat activity cluster codenamed UNK_SmudgedSerpent has been attributed as behind a...
Chinese Hackers RedNovember Target Global Governments Using Pantegana and Cobalt Strike
Sep 24, 2025Ravie LakshmananVulnerability / Network Security A suspected cyber espionage activity cluster that was previously found targeting global government...
GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module
Cybersecurity researchers have lifted the lid on a previously undocumented threat cluster dubbed GhostRedirector that has managed to compromise at...
GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module
Cybersecurity researchers have lifted the lid on a previously undocumented threat cluster dubbed GhostRedirector that has managed to compromise at...
SentinelOne Uncovers Chinese Espionage Campaign Targeting Its Infrastructure and Clients
Cybersecurity company SentinelOne has revealed that a China-nexus threat cluster dubbed PurpleHaze conducted reconnaissance attempts against its infrastructure and some...
False job offers aimed at software developers with data snatchers
A group of activities aligned with North Korea tracked by ESET as DeceptiveDevelopment siphons digital assets from victims' crypto wallets...
Phony job propositions target software developers with data stealers
A group of activities seemingly linked to North Korea and monitored by ESET under the name DeceptiveDevelopment is siphoning funds...
Chinese-Associated Hackers Utilize Check Point Vulnerability to Distribute ShadowPad and Ransomware
A fresh threat cluster directed at European entities, especially those in the medical industry, was observed deploying PlugX and the...
Microsoft: Russian-Affiliated Cybercriminals Employing ‘Device Code Phishing’ to Seize Accounts
In reference to a recent development, Microsoft is highlighting a fresh menace cluster dubbed Storm-2372, which has been linked to...
