Hidden Logic Bombs in Malware-Laced NuGet Packages Set to Detonate Years After Installation
Nov 07, 2025Ravie LakshmananSupply Chain Attack / Malware A set of nine malicious NuGet packages has been identified as capable...
Malware A
SideWinder Adopts New ClickOnce-Based Attack Chain Targeting South Asian Diplomats
Oct 28, 2025Ravie LakshmananCyber Espionage / Malware A European embassy located in the Indian capital of New Delhi, as well...
APT36 Targets Indian Government with Golang-Based DeskRAT Malware Campaign
Oct 24, 2025Ravie LakshmananCyber Espionage / Malware A Pakistan-nexus threat actor has been observed targeting Indian government entities as part...
New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps
Oct 09, 2025Ravie LakshmananMobile Security / Malware A rapidly evolving Android spyware campaign called ClayRat has targeted users in Russia...
New “Cavalry Werewolf” Attack Hits Russian Agencies with FoalShell and StallionRAT
Oct 03, 2025Ravie LakshmananCybersecurity / Malware A threat actor that's known to share overlaps with a hacking group called YoroTrooper...
Chinese TA415 Uses VS Code Remote Tunnels to Spy on U.S. Economic Policy Experts
Sep 17, 2025Ravie LakshmananCyber Espionage / Malware A China-aligned threat actor known as TA415 has been attributed to spear-phishing campaigns...
Deceptive NPM Packages Aim at Roblox Users with Spyware
Nov 08, 2024Ravie LakshmananOpen Source / Malware An ongoing campaign has singled out the npm package repository with deceitful JavaScript...
Deceptive NPM Collections Aim Towards Roblox Players with Information-Theft Malware
Nov 08, 2024Ravie LakshmananOpen Source / Malware An unprecedented operation has pinpointed the npm collection store with deceitful JavaScript libraries...
GoldenJackal Targets Embassies and Air-Gapped Systems Leveraging Malware Toolsets
Oct 08, 2024Ravie LakshmananCyber Security Breach / Malicious Software An obscure threat actor identified as GoldenJackal has been associated with...
Chinese Cyber Thieves Utilize GeoServer Vulnerability to Target APAC Regions with EAGLEDOOR Malware
Sep 23, 2024Ravie LakshmananCyber Espionage / Malware An alleged sophisticated persistent threat (APT) believed to be from China targeted a...
North Korean Cybercriminals Target Energy and Aerospace Sectors with Fresh MISTPEN Malware
Sep 18, 2024Ravie LakshmananCyber Espionage / Malware A cyber-espionage group linked to North Korea has been utilizing phishing tactics related...
Activists Utilize WinRAR Vulnerability in Offensives Against Russia and Belarus
Sep 03, 2024Ravie LakshmananRansomware / Malware An activist faction identified as Head Mare has been connected to digital offensives exclusively...
Activists Utilize WinRAR Weakness in Incursions Against Russia and Belarus
Sep 03, 2024Ravie LakshmananRansomware / Malware A rebel group called Head Mare has been implicated in cyber assaults specifically directed...
Vietnamese Human Rights Group Targeted in Lengthy Cyberattack by APT32
Aug 29, 2024Ravie LakshmananCyber Espionage / Malware A non-profit organization advocating Vietnamese human rights has become the focus of a...
Affected Vietnamese Human Rights Organization Subjected to Long-Term Cyber Breach by APT32
Aug 29, 2024Ravie LakshmananCyber Espionage / Malware An organization advocating for Vietnamese human rights has become the focus of a...
