Tag: APT
Path traversal bug opens VMware vCenter to stealthy remote takeover
Attackers are exploiting a patched vCenter flaw to plant reverse SSH tunnels and hold onto compromised servers.
Memory-only backdoors OctLurk and SilkLurk stalk Central Asia
Kaspersky ties two memory-resident backdoors to government network intrusions across Central Asia.
Iran-linked hackers turn victim machines into covert relays with NightLedger
Nimbus Manticore deploys NightLedger backdoor and custom WebSocket tunnelers to turn compromised systems into covert relay nodes across the Middle…
Russian Laundry Bear group exploits Zimbra zero-day to steal email and 2FA codes
US agencies warn that Russian APT group Laundry Bear is actively exploiting CVE-2025-66376 against unpatched Zimbra Collaboration servers worldwide.
Velvet Ant APT Spent Years Hiding Inside Linux Login Stack
A China linked threat group compromised Linux PAM and OpenSSH components to maintain undetected access for nearly a decade, evading…
China-Linked Hackers Target Linux Appliances with New BSD Backdoor Variant
A Chinese cyber espionage group deployed a BSD variant of the BRICKSTORM backdoor on Linux appliances, infiltrating a victim's network…
FamousSparrow Campaign Targets Energy Infrastructure via Exchange Flaw
Researchers detail a months-long espionage operation where an APT group exploited an Exchange server flaw to breach an Azerbaijani energy…
China Linked APT Group Strikes Asian Governments, NATO Ally, and Civil Society
A custom malware and spear-phishing campaign targeted Asian governments, a NATO ally, and civil society figures to steal credentials and…