cyberspies - Security World Trend Now

In the Crosshairs: North Korean Cyberspies Launch Attacks on GitHub Developers

Patel Maya2 years ago07 mins

North Korean Lazarus APT Group Launches Impersonation Scam Targeting Developers Overview The North Korean state-sponsored Lazarus advanced persistent threat (APT) group has returned with a new social engineering campaign. This time, the group is impersonating developers and recruiters with legitimate GitHub or social media accounts to target a limited group of technology employees. The campaign…

Chinese Cyberspies: Unmasking the Stealthy Hackers Targeting Government Emails

Nguyen Michael2 years ago08 mins

Chinese Cyberspies Used Forged Authentication Tokens to Hack Government Emails In a recent report, Microsoft revealed that a Chinese cyberespionage group, tracked as Storm-0558, has been using forged authentication tokens to gain unauthorized access to government email accounts. This group primarily targets government agencies in Western Europe, focusing on cyberespionage, data theft, and credential access….

The Continuing Threat of Chinese Cyberspies: Latest Exploit Targets VMware ESXi Zero-Day

Emma Thompson2 years ago06 mins

Cyberespionage Group Exploits Zero-Day Vulnerability in VMware ESXi Chinese cyberespionage group UNC3886 has been caught exploiting a zero-day vulnerability in VMware ESXi for privilege escalation purposes, according to the cybersecurity firm, Mandiant. The group has been installing backdoors on ESXi hypervisors to gain command execution, reverse shell capabilities, and file manipulation. Using malicious vSphere Installation…