Tag: Espionage
Spy group OWAReaper backdoor survives password changes and device rebuilds
TA488 exploits OWA cross-site scripting flaw to plant browser implants that survive credential rotation.
Hollowgraph malware turns Microsoft 365 calendars into covert spy channels
Group-IB discovered HOLLOWGRAPH, malware that uses Microsoft 365 calendars as covert command channels with events dated to 2050.
Russian Laundry Bear group exploits Zimbra zero-day to steal email and 2FA codes
US agencies warn that Russian APT group Laundry Bear is actively exploiting CVE-2025-66376 against unpatched Zimbra Collaboration servers worldwide.
New GigaWiper backdoor bundles disk wiping, fake ransomware, and spyware
Microsoft uncovered GigaWiper, a destructive Windows backdoor combining disk-wiping, fake ransomware, and espionage capabilities in a single payload.
Chinese espionage group exploits Roundcube flaws to target US and Canadian universities
Chinese espionage group exploits Roundcube webmail vulnerabilities to target US and Canadian universities
China-Aligned Attackers Use ShadowPad, IOX Proxy, and WMIC in Multi-Stage Espionage Campaign
The SHADOW-EARTH-053 group has been quietly infiltrating government agencies across eight countries since December 2024 using ShadowPad malware and living-off-the-land…