SEC News

What's new arround internet

Last one

Src	Date (GMT)	Titre	Description	Tags	Stories	Notes
	2022-12-01 11:02:51	North Korea ScarCruft APT used previously undetected Dolphin Backdoor against South Korea (lien direct)	>North Korea-linked ScarCruft group used a previously undocumented backdoor called Dolphin against targets in South Korea. ESET researchers discovered a previously undocumented backdoor called Dolphin that was employed by North Korea-linked ScarCruft group (aka APT37, Reaper, and Group123) in attacks aimed at targets in South Korea. ScarCruft has been active since at least 2012, it made the headlines in early February 2018 when researchers […]	Cloud	APT 37	★★
	2022-07-24 13:53:53	Is APT28 behind the STIFF#BIZON attacks attributed to North Korea-linked APT37? (lien direct)	>North Korea-linked APT37 group targets high-value organizations in the Czech Republic, Poland, and other countries. Researchers from the Securonix Threat Research (STR) team have uncovered a new attack campaign, tracked as STIFF#BIZON, targeting high-value organizations in multiple countries, including Czech Republic, and Poland. The researchers attribute this campaign to the North Korea-linked APT37 group, aka […]	Threat Cloud	APT 37 APT 28
	2022-07-09 16:53:07	Apple Lockdown Mode will protect users against highly targeted cyberattacks (lien direct)	>Apple plans to introduce a security feature, called Lockdown Mode, to protect its users against “highly targeted cyberattacks.” The recent wave of sophisticated attacks against Apple users (i.e. Pegasus, DevilsTongue, and Hermit) urged the tech giant to develop a new security feature, called Lockdown Mode, to protect its users against highly targeted cyberattacks. The new feature will be implemented in iOS 16, iPadOS […]	Cloud	APT 37
	2022-06-17 20:00:33	Experts link Hermit spyware to Italian surveillance firm RCS Lab and a front company (lien direct)	>Experts uncovered an enterprise-grade surveillance malware dubbed Hermit used to target individuals in Kazakhstan, Syria, and Italy since 2019. Lookout Threat Lab researchers uncovered enterprise-grade Android surveillance spyware, named Hermit, used by the government of Kazakhstan to track individuals within the country. The latest samples of this spyware were detected by the researchers in April 2022, four […]	Malware Threat Cloud	APT 37
	2022-04-26 08:25:03	North Korea-linked APT37 targets journalists with GOLDBACKDOOR (lien direct)	North Korea-linked APT37 group is targeting journalists that focus on DPRK with a new piece of malware. North Korea-linked APT37 group (aka Ricochet Chollima) has been spotted targeting journalists focusing on DPRK with a new piece of malware. The campaign was discovered by journalists at NK News, an American news site that focuses on North […]	Cloud	APT 37
	2021-12-07 15:28:27	Bitcoin Miner [oom_reaper] targets QNAP NAS devices (lien direct)	Taiwanese vendor QNAP warns customers of ongoing attacks targeting their NAS devices with cryptocurrency miners. Taiwanese vendor QNAP warns customers of threat actors targeting their NAS devices with cryptocurrency miners. Upon compromising the devices, the miner will create a new process named [oom_reaper] that allows threat actors to mine Bitcoin The above process could occupy […]	Threat Cloud	APT 37
	2021-11-19 15:14:40	North Korea-linked TA406 cyberespionage group activity in 2021 (lien direct)	North Korea-linked TA406 APT group has intensified its attacks in 2021, particularly credential harvesting campaigns. A report published by Proofpoint revealed that the North Korea-linked TA406 APT group (Kimsuky, Thallium, and Konni, Black Banshee, Velvet Chollima) has intensified its operations in 2021. The TA406 cyber espionage group was first spotted by Kaspersky researchers in 2013. At the end of October […]	Cloud	APT 37
	2021-08-19 06:47:34	NK-linked InkySquid APT leverages IE exploits in recent attacks (lien direct)	North Korea-linked InkySquid group leverages two Internet Explorer exploits to deliver a custom implant in attacks aimed at a South Korean online newspaper. Experts from cybersecurity firm Volexity reported that North Korea-linked InkySquid group (aka ScarCruft, APT37, Group123, and Reaper) leverages two Internet Explorer exploits to deliver a custom backdoor in watering hole attacks aimed at the […]	Cloud	APT 37
	2020-11-02 16:40:03	North Korea-Linked APT Group Kimsuky spotted using new malware (lien direct)	North Korea-linked APT group Kimsuky was recently spotted using a new piece of malware in attacks on government agencies and human rights activists. North Korea-linked cyber espionage group Kimsuky (aka Black Banshee, Thallium, Velvet Chollima) was recently observed using a new malware in attacks aimed at government agencies and human rights activists. The Kimsuky APT […]	Malware Cloud	APT 37
	2019-12-30 21:57:04	Microsoft sued North Korea-linked Thallium group (lien direct)	Microsoft sued Thallium North Korea-linked APT for hacking into its customers’ accounts and networks via spear-phishing attacks. Microsoft sued a North Korea-linked cyber espionage group tracked as Thallium for hacking into its customers’ accounts and networks via spear-phishing attacks. The hackers target Microsoft users impersonating the company, according to a lawsuit unsealed Dec. 27 in […]	Cloud	APT 37
	2019-05-14 12:48:00	North Korea-linked ScarCruft APT adds Bluetooth Harvester to its arsenal (lien direct)	The North Korea-linked APT group ScarCruft (aka APT37 and Group123) continues to expand its arsenal by adding a Bluetooth Harvester. North Korea-linked APT group ScarCruft (aka APT37, Reaper, and Group123) continues to expand its arsenal by adding a Bluetooth Harvester. ScarCruft has been active since at least 2012, it made the headlines in early February […]	Cloud	APT 37
	2018-08-10 16:15:03	The analysis of the code reuse revealed many links between North Korea malware (lien direct)	Security researchers at Intezer and McAfee have conducted a joint investigation that allowed them to collect evidence that links malware families attributed to North Korean APT groups such as the notorious Lazarus Group and Group 123. The experts focused their analysis on the code reuse, past investigations revealed that some APT groups share portions of code […]	Malware Medical Cloud	APT 38 APT 37
	2018-07-11 11:49:04	Hacker offered for sale US Military Reaper Drone documents for $200 (lien direct)	Researchers at threat intelligence firm Recorded Future have reported that a hacker was trying to sell US Military Reaper drone documents for less than $200. The news is disconcerting, the hackers may have obtained the documents related to the Reaper drone by hacking into at least two computers belonging to U.S. military personnel. “Specifically, an English-speaking hacker claimed […]	Threat Cloud	APT 37
	2018-02-27 18:54:05	Recently patched CVE-2018-4878 Adobe Flash Player flaw now exploited by cybercriminals (lien direct)	Security researchers at Morphisec have uncovered a massive hacking campaign that is exploiting the recently patched CVE-2018-4878 Adobe Flash Player vulnerability. Threat actors are exploiting the use-after-free flaw to deliver malware. The CVE-2018-4878 vulnerability was fixed by Adobe on February 6, after security experts discovered it was used by North Korea-linked APT37 group in targeted […]	Cloud	APT 37
	2018-02-21 06:34:04	North Korean APT Group tracked as APT37 broadens its horizons (lien direct)	Researchers at FireEye speculate that the APT group tracked as APT37 (aka Reaper, Group123, ScarCruft) operated on behalf of the North Korean government. Here we are to speak about a nation-state actor dubbed APT37 (aka Reaper, Group123, ScarCruft) that is believed to be operating on behalf of the North Korean government. APT37 has been active since at least […]	Cloud	APT 37

Last update at: 2024-04-27 18:08:39
See our sources.

To see everything: Our RSS (filtrered)