A notorious Russian hacking crew has evolved its tactics to make an already dangerous espionage campaign even more effective.Dubbed “Void Blizzard,” the group has an extensive history of running espionage and infiltration attacks against foreign governments and non-government organization (NGO) groups at the direction of Russian intelligence.Some of the group’s favorite targets include military, defense, … Read more
On Thursday, researchers with the Symantec security firm reported on a collaboration that worked the other way—use by the RA World ransomware group of a “distinct toolset” that previously has been seen used only in espionage operations by a China-linked threat group. The toolset, first spotted in July, was a variant of PlugX, a custom … Read more
Feb 13, 2025Ravie LakshmananMalware / Cyber Espionage Threat hunters have shed light on a new campaign targeting the foreign ministry of an unnamed South American nation with bespoke malware capable of granting remote access to infected hosts. The activity, detected in November 2024, has been attributed by Elastic Security Labs to a threat cluster it … Read more
Cybersecurity researchers have uncovered a novel malware marketing campaign that leverages Google Sheets as a command-and-control (C2) mechanism. The exercise, detected by Proofpoint beginning August 5, 2024, impersonates tax authorities from governments in Europe, Asia, and the U.S., with the purpose of concentrating on over 70 organizations worldwide via a bespoke software known as Voldemort … Read more