LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan
In 2024, ESET researchers noticed previously undocumented malware in the network of a Southeast Asian governmental entity. This led us...
undocumented
China-Aligned Threat Group Uses Windows Group Policy to Deploy Espionage Malware
Dec 18, 2025Ravie LakshmananMalware / Cloud Security A previously undocumented China-aligned threat cluster dubbed LongNosedGoblin has been attributed to a...
APT24 Deploys BADAUDIO in Years-Long Espionage Hitting Taiwan and 1,000+ Domains
A China-nexus threat actor known as APT24 has been observed using a previously undocumented malware dubbed BADAUDIO to establish persistent...
New Android Banking Trojan “Klopatra” Uses Hidden VNC to Control Infected Smartphones
A previously undocumented Android banking trojan called Klopatra has compromised over 3,000 devices, with a majority of the infections reported...
New Android Trojan “Datzbro” Tricking Elderly with AI-Generated Facebook Travel Events
Cybersecurity researchers have flagged a previously undocumented Android banking trojan called Datzbro that can conduct device takeover (DTO) attacks and...
GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module
Cybersecurity researchers have lifted the lid on a previously undocumented threat cluster dubbed GhostRedirector that has managed to compromise at...
GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module
Cybersecurity researchers have lifted the lid on a previously undocumented threat cluster dubbed GhostRedirector that has managed to compromise at...
YouTube Gameplay Cheats Disseminate Cryptic Thieving Malware to Russian-Speaking Users
Video content on YouTube endorsing cheating tactics in games is being employed to distribute a newly discovered theft-oriented malware named...
Utilizing PowerShell, Golang, and C++ Loaders by Silent Lynx in Sophisticated Cyber Offensives
An unidentified malicious actor dubbed Silent Lynx has surfaced recently in connection with cyber intrusions directed at multiple organizations in...
South Korean VPN Provider Targeted by PlushDaemon APT in Cyberattack
ESET recently revealed that a newly identified APT group, PlushDaemon, with ties to China, carried out a supply chain attack...
VBCloud Malware Unleashed by Cloud Atlas: Majority of Victims Detected in Russia
Cloud Atlas, a threat actor, has recently been identified deploying a new malware named VBCloud in its cyber assault operations...
DeceptionAds Provides Over 1 Million Impressions Daily Through 3,000 Websites, Fake CAPTCHA Pages
A new revelation by cybersecurity experts uncovers an undocumented element linked to ClickFix-type assaults exploiting a solitary ad network service...
China-Connected CeranaKeeper Targeting Southeast Asia with Information Theft
Oct 02, 2024Ravie LakshmananCyber Espionage / Cloud Security An undiscovered threat actor known as CeranaKeeper has been associated with a...
Recent Brazilian-Linked SambaSpy Malware Zeroes In on Italian Users Using Phishing Emails
An unknown malware known as SambaSpy has surfaced, specifically directed at the Italian user community through deceitful emails that are...
Cyber Campaign by TIDRONE Spy Group Against Drone Manufacturers in Taiwan
Sep 09, 2024Ravie LakshmananCyber Attack / Threat Intelligence In a cyber attack campaign starting in 2024, a previously unknown threat...
