Turla

MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration

AI-Assisted Cyberespionage Campaign Targets Government Systems

Swallowtail: Russian Espionage Group Targets Defense Firms in Two NATO Countries

Midnight Mimosa Malware Campaign Exploits Android Firmware Supply Chain

Chinese State-Linked Hackers Target US Critical Infrastructure with Automated Scanning and Cyber Espionage Tools

Aoki: Infostealer Targets AI Coding Assistant Credentials

Beware of Phishing Emails Disguised as Purchase Orders

ClingSTUN Turns Vulnerable Edge Devices Into Attacker Infrastructure

Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations

China Linked Warlock Ransomware Campaign Targets Critical Infrastructure

Ibm X Force Discovers New Sheriff Backdoor Used to Target Ukraine | Ibm

중동을 겨냥한 MuddyWater APT 공격 연대기

Uroboros Revisited: Tracing PatchGuard-Evasive Techniques Beyond SSDT Hooking

Analysis of Equation Group’s nls_933w.dll: Revealing Core Tactics and Technical Mindset

Static Analysis of Turla’s Uroboros: Revealing Core Tactics and Technical Mindset

SSDT Hooking: A Personal Walkthrough of Kernel-Mode Intrigue (Uroboros Echoes)

From SSDT to IDT: A Personal Walkthrough of Kernel-Mode Intrigue (Uroboros Echoes)

Warlock Ransomware Attackers Hit Water and Telecom Operators

'ChainDrop' worm compromises hundreds of popular npm packages

Dissecting SnakeKeyLogger Macros

The Job Offer Has Claws: Mirage Kitten Deploys NodeRabbit and PollCat

CLOSEDQUORUM: Malware Puts AI in the C2 Loop

FamousSparrow Takes Flight with New SparroWocky Backdoor

China and the Cyber Arms Race for AI Supremacy

Gamers Get Played: Fake GTA6 Leaks Deliver a Grab Bag of Malware

Lunex Uses BYOVD to Disable Security Monitoring and Deploy Persistent Stealer

BraZetsu: AI-Enhanced Reconnaissance Fuels Exilware’s Access Marketplace

BlueMoon Exploit Kit Rapidly Targets Key Verticals Across Multiple Espionage Campaigns

Targeting the Systems Behind the Mission: OT Threats to US Critical Infrastructure and Military Operations

How Huntress Detects and Responds to a ClickFix Attack