RSS Reader for Computer Security Articles
Credit to Author: Peter Girnus| Date: Tue, 04 Feb 2025 00:00:00 +0000
The ZDI team offers an analysis on how CVE-2025-0411, a zero-day vulnerability in 7-Zip, was actively exploited to target Ukrainian organizations in a SmokeLoader campaign involving homoglyph attacks.
Read MoreCredit to Author: Feike Hacquebord| Date: Tue, 17 Dec 2024 00:00:00 +0000
APT group Earth Koshchei, suspected to be sponsored by the SVR, executed a large-scale rogue RDP campaign using spear-phishing emails, red team tools, and sophisticated anonymization techniques to target high-profile sectors.
Read MoreCredit to Author: Mike Grodzki| Date: Mon, 09 Dec 2024 00:00:00 +0000
Enterprise 2024 will incorporate multiple, smaller emulations for a more nuanced and targeted evaluation of defensive capabilities. We’re excited to offer two distinct adversary focus areas: Ransomware targeting Windows and Linux, and the Democratic People’s Republic of Korea’s targeting macOS.
Read MoreCredit to Author: Joseph C Chen| Date: Thu, 05 Dec 2024 00:00:00 +0000
Trend Micro’s monitoring of the MOONSHINE exploit kit revealed how it’s used by the threat actor Earth Minotaur to exploit Android messaging app vulnerabilities and install the DarkNimbus backdoor for surveillance.
Read MoreCredit to Author: Hara Hiroaki| Date: Tue, 26 Nov 2024 00:00:00 +0000
Trend Micro has identified a spear-phishing campaign active in Japan since June 2024. Evidence about the malware used by this campaign suggests this was part of a new operation by Earth Kasha.
Read MoreCredit to Author: Leon M Chang| Date: Mon, 25 Nov 2024 00:00:00 +0000
Since 2023, APT group Earth Estries has aggressively targeted key industries globally with sophisticated techniques and new backdoors, like GHOSTSPIDER and MASOL RAT, for prolonged espionage operations.
Read MoreCredit to Author: Hara Hiroaki| Date: Tue, 19 Nov 2024 00:00:00 +0000
LODEINFO is a malware used in attacks targeting mainly Japan since 2019. Trend Micro has been tracking the group as Earth Kasha. We have identified a new campaign connected to this group with significant updates to their strategy, tactics, and arsenals.
Read MoreCredit to Author: Ted Lee| Date: Fri, 08 Nov 2024 00:00:00 +0000
Discover how Earth Estries employs a diverse set of tactics, techniques, and tools, including malware such as Zingdoor and Snappybee, for its campaigns.
Read More