Government Linux Servers Targeted by SysGoRAT and AI-Generated Scripts
A state-linked cyber espionage campaign targeting government Linux servers from October 2025 to April 2026 leverages SysGoRAT malware and likely AI-generated scripts.
Tag
#Cyber Espionage
15 results in the archive.
UAC-0099 Deploys ASHVEIN RAT Targeting Ukrainian Government Staff
The Russia-aligned threat actor UAC-0099 is deploying the ASHVEIN RAT, a .NET infostealer, against Ukrainian government personnel using obfuscated commands in HTML, indicating an evolving espionage effort.
Iranian Hackers Deploy CHOSEN BRICK Malware to Target Activists
Iranian state-linked hackers are using the CHOSEN BRICK Windows malware to conduct surveillance on activists, dissidents, and journalists worldwide, enabling persistent spying and data collection.
Russian Hackers Use AI to Rebuild Malware Faster After Detection
Anthropic has disrupted a Russian state-sponsored threat actor's campaign that used AI to accelerate malware redevelopment and evade detection, marking an evolution in cyber espionage.
China-Linked Fire Ant Targets Cisco Routers to Steal Credentials
The China-linked Fire Ant group has compromised Cisco IOS XR routers, TACACS servers, and Linux hosts to steal credentials and disable security logs, targeting critical network infrastructure.
FBI Disrupts China-Linked QTFY Platforms Targeting U.S. Infrastructure
The FBI disrupted two hacking platforms, QScan and QTRouter, linked to the Chinese state-sponsored group QTFY targeting critical U.S. infrastructure.
Nimbus Manticore Expands Toolset With New Backdoor and SSH Tunneler
Researchers identified new malware and infrastructure linked to the Iranian state-sponsored group Nimbus Manticore, increasing cyber espionage risks.
Suspected Russian Hackers Exploit Google OAuth and WhatsApp for Account Hijacking
Three Russian cyber espionage clusters abuse Google OAuth flows and WhatsApp linking to hijack accounts in high-value sectors across Europe and the U.S.
SilkParasite Espionage Targets Central Asian Governments with Five New RATs
SilkParasite, a newly uncovered cyber espionage campaign, targets Central Asian government bodies using seven remote access tools, five of which are previously undocumented, highlighting evolving advanced threats in the region.
Jewelbug Hackers Breach Govt Webmail While Conducting Crypto Fraud
The Jewelbug hacker group has breached government and military webmail accounts while simultaneously conducting cryptocurrency fraud, illustrating a dual-threat approach involving cyber espionage and financial crime.
Lazarus Group Exploits Windows Zero-Day to Deploy New Backdoor
North Korea's Lazarus Group exploited a recently patched Windows zero-day to deploy a new backdoor targeting defense and aerospace firms as part of Operation Dream Job.
Sandworm-Linked Group Uses Fake Job Interviews to Deploy Malware
CERT-UA reports Sandworm subgroup UAC-0145 targets Ukrainian IT workers with fake job interviews to deploy malware via a malicious VPN tool.
Russian Intelligence Hacks IP Cameras to Monitor NATO & Ukraine Military Movements
Russian intelligence services compromise internet-connected security cameras across Europe and Ukraine to gather military logistics intelligence, as reported by the Netherlands' AIVD and MIVD.
Hackers Abuse ViPNet Updates to Target Russian Government Agencies
An advanced threat actor exploits the update mechanism of ViPNet private networking software to attack Russian government agencies, illustrating ongoing espionage.
Hackers Exploit Balochistan Police Portal in Multi-Group Espionage
Researchers reveal cyber espionage targeting Pakistani law enforcement by suspected China- and India-aligned groups between 2024 and 2026, compromising police servers with critical data.