Skip to main content

Tag: cyber espionage

213 articles

Busy office in Vietnam with cityscape view and people working at desks.

OceanLotus Targets Vietnam Investors with SPECTRALVIPER Backdoor

The notorious 15-year-old APT group, OceanLotus, is now setting its sights on Vietnam's investors with a cunning new backdoor attack called SPECTRALVIPER, showcasing their relentless adaptability and aggressive tactics. This latest move has left experts wondering if it's a temporary shift or a long-term strategy.

Analyst 207
Government office workstation with blurred computer screen and muted decor.

French Govt Messaging Service Breached in Account Hijacking Attack

France's digital affairs directorate swiftly sprang into action, blocking a compromised account that was used to hijack a government messaging service, and is now conducting a thorough investigation to assess the damage. The breach was detected by the French Cybersecurity Agency, allowing authorities to shut down the attacker's access and analyze what data was exposed.

Analyst 207
Person holding smartphone with blank screen, surrounded by blurred cityscape and subtle hint of phishing attempt on nearby…

Meta Alleges NSO Group Breaches Spyware Injunction

Meta just took a bold stand against NSO Group, the notorious spyware maker, by ramping up legal action after thwarting a sneaky phishing campaign aimed at WhatsApp users. The tech giant successfully blocked NSO-linked attempts to trick people into clicking malicious links, despite a US court injunction already in place.

Analyst 207
Radar system installed on a raised platform in a desert landscape under a clear blue sky.

Handala's Israeli Radar Claim Sparks Skepticism

Can a mysterious Iranian-linked hacker group really take down Israel's radar systems? Handala claims it did on the same day Israel and Iran exchanged missile fire, but experts are raising an eyebrow.

Analyst 207
Government building with subtle cyber activity hints in bright daylight.

China-Aligned Hackers Target Czech Republic, Taiwan in Cyber Espionage Push

China-aligned hackers have launched a sneaky cyber espionage campaign, dubbed Operation Dragon Weave, targeting officials and citizens in the Czech Republic and Taiwan with a cunning malware that masquerades as a legitimate cloud storage service. The malware ultimately delivers an AdaptixC2 agent, putting sensitive information at risk.

Analyst 207
Dimly lit Ukrainian government office with laptop showing chatbot interface on screen.

Russia-linked Group Leverages ChatGPT in Cyberattacks on Ukraine

Meet GREYVIBE, a Russia-linked cyber group that's taking its attacks on Ukraine to the next level with the help of AI tools like ChatGPT, targeting the country's military and government. This sinister crew is leveraging cutting-edge tech to supercharge its cyberattacks.

Analyst 207
President Donald Trump stands on White House steps with subtle global map background.

Trump Reveals US, China Discussed Cyberattacks, Espionage

President Donald Trump revealed that he and Chinese President Xi Jinping had a candid conversation about cyberattacks and espionage, with Trump bluntly stating that the US spies on China just as China spies on the US. Trump hinted at a cat-and-mouse game between the two nations, saying the US does things to China that it doesn't know about, while China does things to the US that are probably known.

Analyst 207
Government building in Ukraine with a sense of unease, document on desk.

Ghostwriter Launches Geofenced PDF Phishing Against Ukraine Government

Meet FrostyNeighbor, a Belarus-aligned threat actor that's been wreaking havoc since 2016 with sophisticated cyber espionage and influence operations targeting Ukraine and beyond. This adaptive group has earned a reputation for evolving its tactics, using diverse lures and delivery mechanisms to stay one step ahead.

Analyst 207
Interior of an electronics manufacturing facility with technicians at workstations.

Iranian Hackers Target Electronics Maker in Global Espionage Push

Iran-linked hackers, known as MuddyWater, infiltrated a major South Korean electronics manufacturer's network for a week in February 2026, as part of a massive global cyber-espionage campaign targeting nine high-profile organizations across multiple sectors and countries.

Analyst 207
Dimly lit server room with rows of computer servers and networking equipment, a single unoccupied laptop in the foreground.

Iranian Spies Masquerade as Ransomware Gangs in Espionage Ops

A new wave of cyber threats has emerged, where Iranian spies masquerade as ransomware gangs to secretly infiltrate and gather intel from targeted organizations. Behind the scenes, they're hiding a wide-open backdoor, putting defenders and the organizations they protect at risk.

Analyst 207
Modern office interior with subtle hints of cyber activity in the background.

MuddyWater hackers exploit Chaos ransomware as cyber-espionage decoy

MuddyWater hackers have cleverly used Chaos ransomware as a decoy to mask their true intentions - and it's not about making a quick buck. Instead, their tactics suggest a more sinister goal, blurring the lines between state-sponsored espionage and cybercrime.

Analyst 207
Government officials gather in a briefing room with American flags, discussing law enforcement and cybersecurity.

FBI Disrupts China's Hacker-for-Hire Ecosystem with Key Extradition

The FBI has struck a major blow against China's notorious hacker-for-hire ecosystem, disrupting a vast network of private tech companies and contractors secretly working for the Chinese government. This bold move exposes a brazen operation that prioritized profit by exploiting vulnerable computers and selling sensitive information to the highest bidder.

Analyst 207
Rows of equipment and monitors line the walls of a network operations center, with technicians working in the background.

Novel Chinese Spy Group Infiltrates Critical Networks in Poland, Asia

A recent investigation by TrendAI has uncovered a concerning China-linked espionage campaign, with a novel spy group infiltrating over a dozen critical networks across Poland and Asia, leaving behind a lingering threat that's experts' biggest worry. The threat group, tracked as Shadow-Earth-053, has been actively compromising networks since December 2024.

Analyst 207
Formal courthouse scene with stern atmosphere, blurred figures in background.

China's Silk Typhoon Hacker Extradited to US Over COVID Cyberattacks

A Chinese hacker, Xu Zewei, has been extradited to the US from Italy for masterminding a series of devastating cyberattacks on US universities, immunologists, and virologists working on COVID-19 vaccines, treatments, and testing between 2020 and 2021. He faces charges of wire fraud and conspiracy for his role in the attacks.

Analyst 207
Cluttered server room with stacked routers, cables, and wires in dim light.

China Builds Covert Hacker Networks with Compromised Routers

China-nexus cyber actors have dramatically changed their game, ditching solo operations for massive networks of hacked devices - and it's a threat you need to know about. A joint advisory from top cyber agencies worldwide warns of this new tactic, urging vigilance in the face of large-scale cyber attacks.

Analyst 207
A router on a rack in a network closet with multiple cables connected.

China-Linked Hackers Exploit Global Infrastructure in Covert Network Attacks

Be on high alert: China-linked hackers are secretly building global covert networks using compromised routers and devices, putting anyone who's a target at risk of devastating cyber attacks and data theft. This sinister plot, revealed by a joint advisory from 16 government agencies worldwide, has far-reaching implications for organizations and individuals alike.

Analyst 207
Living room with router and smart device on coffee table near window.

Chinese Hackers Exploit IoT Devices to Obscure Nation-State Attacks

Chinese hackers are sneaking nation-state attacks under the radar by hijacking everyday IoT devices, such as home routers and smart cameras, to hide their digital footprints. This stealthy tactic allows them to evade accountability and strike from the shadows.

Analyst 207
Shadowy figure in hoodie hunched over laptop with code, surrounded by papers and coffee cups, with cityscape and subtle…

Grinex Probes Western Spy Role in $13m Crypto Heist

A bombshell accusation by Russian crypto-exchange Grinex claims that Western intelligence agencies, not ordinary hackers, were behind a staggering $13 million crypto heist. This shocking allegation raises more questions than answers, sparking a complex web of intrigue and suspicion.

Analyst 207
Dismantled router with exposed internal components sits on worn table amidst tangled cables and wires in dimly lit room.

FBI Disrupts APT28's Router-Based Espionage Operations

The FBI recently disrupted a sneaky espionage operation run by APT28, a Russian GRU-linked group notorious for its broad reach, by cutting off their access to a network of routers they used as a launching pad for further attacks. This bold move effectively severed the group's tremendous access, putting a stop to their clever tactics.

Analyst 207
Desert landscape at dusk with a broken smartphone and scattered papers in the foreground, a lone figure silhouetted in the…

Bitter APT Group Exploits Middle East Spear-Phishing Campaign

The Bitter APT Group has been linked to a sophisticated year-long spear-phishing campaign that targeted the Middle East, using deceptive emails to spread its reach. This hack-for-hire effort, attributed to a South Asian connection, signals a sustained threat to the region's security.

Analyst 207
Globe centered on Russia with shattered network, silhouettes of law enforcement disrupting tangled web.

FBI Disrupts Russian Hacker Network with DNS Hijacking Takedown

In a major cyber takedown, the FBI has successfully disrupted a Russian hacker network by pulling the plug on compromised US-based routers, effectively cutting off the threat actor's malicious infrastructure. This bold move allowed authorities to neutralize the threat without relying on individual device owners to take action.

Analyst 207
Person in a hoodie with obscured face sits in front of laptop displaying cityscape, surrounded by network-like lines and…

Mandiant Report Reveals Evolving Cyber Threat Tactics

Discover the alarming evolution of cyber threats in Mandiant's M-Trends 2026 report, which reveals a stark reality: attackers are now operating under two distinct playbooks, drastically changing the detection, response, and risk landscape. The report uncovers a significant increase in global median dwell time to 14 days, with some attacks lingering for as long as 122 days.

Analyst 207
Worn router on a desk surrounded by candles with a looming Russian shadow.

NCSC Warns of Russia's Ongoing Router Exploits

Russia's notorious hackers, Fancy Bear, are exploiting routers to steal passwords and sensitive information, compromising the security of countless individuals and organisations. With around 5,000 devices and 200 organisations already affected, experts warn that this latest threat is one to take seriously.

Analyst 207
Nation-State Hackers Exploit Cloud Services for Global Espionage

Nation-State Hackers Exploit Cloud Services for Global Espionage

In the shadows of the digital world, nation-state hackers are quietly exploiting cloud services to orchestrate global cyber espionage - but how can organizations, governments, and individuals defend against threats they can't see? The hidden world of cyber espionage poses a daunting question: what's at stake when the invisible forces of cyber threats manipulate the systems we rely on?

Analyst 207