APT41, a China-based cyber threat group, has been linked to an extensive campaign targeting multiple sectors worldwide. This campaign has particularly affected global shipping and logistics organizations, media and entertainment, technology, and automotive sectors across Italy, Spain, Taiwan, Thailand, Turkey,…
The cybersecurity landscape is ever-evolving, with new threats emerging regularly. Two recent discoveries, the Starkcat and HotPage malware, have drawn significant attention due to their sophisticated methodologies and potential impacts. Origin and Discovery Starkcat, identified by cybersecurity researchers at ESET…
In the ever-evolving landscape of cyber threats, the North Korea-linked nation-state group BlueNoroff has once again made headlines. Jamf Threat Labs recently uncovered a previously undocumented macOS malware strain dubbed ObjCShellz. This malware is attributed to BlueNoroff and is a…
In the ever-evolving landscape of cybersecurity threats, a new adversary, AtlasCross, has emerged on the scene and raised significant concerns among cybersecurity experts. This advanced persistent threat (APT) group, recently brought to the forefront by NSFOCUS Security Labs, is known…
The Port of Nagoya, Japan’s largest and busiest port, has been hit by a ransomware attack, causing significant disruptions to its container terminals. This cyberattack has affected the port’s operations and raised concerns about critical infrastructure security. Let’s explore the…
For almost two years, from June 2021 to April 2023, a widespread eCrime campaign targeted clients of prominent banks worldwide. The mastermind behind this operation, known as Neo_Net, focused primarily on Spanish and Chilean banks, successfully compromising the security of…
Microsoft has refuted the claims made by the hacktivist group “Anonymous Sudan” regarding a successful breach of the company’s servers and the theft of 30 million customer account credentials. Anonymous Sudan has been known for launching distributed denial-of-service (DDoS) attacks…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently identified eight vulnerabilities that are actively being exploited in Samsung and D-Link devices. These vulnerabilities have been added to the Known Exploited Vulnerabilities (KEV) catalog. Despite patches being available for…
A Chinese threat actor has recently been identified by Check Point Research (CPR) for targeting Foreign Affairs ministries and embassies in Europe. The campaign, known as SmugX, has been active since at least December 2022. The attackers employ HTML smuggling…
Taiwan Semiconductor Manufacturing Company (TSMC), the world’s largest contract chipmaker, has recently acknowledged experiencing a data breach after being targeted by the LockBit ransomware gang. The attack highlights the growing threat of cybercriminals to even the most prominent organizations in…