Tag: Espionage
Old Chromium build inside Sogou let attackers into Windows
Gen Digital says a China-linked crew used a Sogou input method flaw to plant the GRAYRABBIT backdoor on Windows machines.
Fire Ant spies turn Cisco routers into credential-stealing outposts
Sygnia traces the China-nexus group beyond VMware to routers, TACACS servers, and management hosts.
Attacker’s sloppy server exposes Philippine nuclear site breach
Hunt.io found an exposed server packed with evidence of ownCloud and WordPress intrusions against Philippine targets.
China-linked crew leans on AI while spying on Central Asian states
Bitdefender ties the SilkParasite cluster to China and finds AI-assisted code in a five-RAT espionage arsenal.
Google ties three Russian crews to OAuth phishing on academics
Google tracks three suspected Russian clusters abusing OAuth and WhatsApp to hijack targeted accounts.
Spy group OWAReaper backdoor survives password changes and device rebuilds
TA488 exploits OWA cross-site scripting flaw to plant browser implants that survive credential rotation.
Hollowgraph malware turns Microsoft 365 calendars into covert spy channels
Group-IB discovered HOLLOWGRAPH, malware that uses Microsoft 365 calendars as covert command channels with events dated to 2050.
Russian Laundry Bear group exploits Zimbra zero-day to steal email and 2FA codes
US agencies warn that Russian APT group Laundry Bear is actively exploiting CVE-2025-66376 against unpatched Zimbra Collaboration servers worldwide.