FBI and NSA expose new Linux malware Drovorub, used by Russian state hackers

The FBI and NSA have published today a joint security alert containing details about a new strain of Linux malware that the two agencies say was developed and deployed in real-world attacks by Russia’s military hackers. The two agencies say Read More …

CactusPete APT group’s updated Bisonal backdoor

CactusPete (also known as Karma Panda or Tonto Team) is an APT group that has been publicly known since at least 2013. Some of the group’s activities have been previously described in public by multiple sources. We have been investigating Read More …

RedCurl cybercrime group has hacked companies for three years

Security researchers have uncovered a new Russian-speaking hacking group that they claim has been focusing on the past three years on corporate espionage, targeting companies across the world to steal documents that contain commercial secrets and employee personal data. Named Read More …

UK: Russian hackers stole trade papers from Liam Fox email

Documents on UK-US trade talks, leaked ahead of the 2019 general election, were stolen from an email account belonging to Conservative MP Liam Fox, it has emerged. The papers were published online and used by Labour in the 2019 campaign Read More …

US defense and aerospace sectors targeted in new wave of North Korean attacks

Tracked under the codename of “Operation North Star,” McAfee said these attacks have been linked to infrastructure and TTPs (Techniques, Tactics, and Procedures) previously associated with Hidden Cobra — an umbrella term the US government uses to describe all North Read More …

CISA says 62,000 QNAP NAS devices have been infected with the QSnatch malware

Cyber-security agencies from the UK and the US have published today a joint security alert about QSnatch, a strain of malware that has been infecting network-attached storage (NAS) devices from Taiwanese device maker QNAP. In alerts [1, 2] by the United Read More …

Iranian cyberspies leave training videos exposed online

One of Iran’s top hacking groups has left a server exposed online where security researchers say they found a trove of screen recordings showing the hackers in action. Discovered by IBM’s X-Force cyber-security division, researchers believe the videos are tutorials Read More …

Second Catalan politician says phone was targeted by spyware

A second prominent member of Catalan’s pro-independence movement has revealed he was warned that his mobile phone was targeted using spyware. The development is likely to bolster calls for an investigation into the possible use of hacking technology by Spanish Read More …

Israel court rejects calls to revoke NSO Group’s spy software export licence

A court in Tel Aviv has rejected a ruling to order Israel to revoke the export license of the NSO Group, the country’s largest surveillance company, whose software has reportedly been used by governments to spy on dissidents and human Read More …