Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
Ravie LakshmananAug 11, 2026Social Engineering / Malware The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a...
MalwareThe
Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks
Ravie LakshmananJun 29, 2026Threat Intelligence / Malware The China-aligned espionage group Mustang Panda is running two campaigns against the Indian government and...
Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine
Ravie LakshmananJun 02, 2026Threat Intelligence / Malware The Russian hacking group known as Gamaredon has been attributed to the continued...
Harvester Deploys Linux GoGra Backdoor in South Asia Using Microsoft Graph API
Ravie LakshmananApr 22, 2026Cyber Espionage / Malware The threat actor known as Harvester has been attributed to a new Linux...
APT28 Uses Microsoft Office CVE-2026-21509 in Espionage-Focused Malware Attacks
Ravie LakshmananFeb 03, 2026Vulnerability / Malware The Russia-linked state-sponsored threat actor known as APT28 (aka UAC-0001) has been attributed to...
Notepad++ Official Update Mechanism Hijacked to Deliver Malware to Select Users
Ravie LakshmananFeb 02, 2026Threat Intelligence / Malware The maintainer of Notepad++ has revealed that state-sponsored attackers hijacked the utility's update...
