Skip to main content

Tag: cyberespionage

5 articles

South Asian office building with network equipment and a lone IT professional.

Bitter Hackers Deploy PapRAT Backdoor in South Asia Cyberespionage Campaign

Meet PapRAT, a sneaky new backdoor that's helping Bitter hackers infiltrate South Asian organizations in a fresh cyberespionage campaign. This crafty malware comes in both C++ and Rust flavors, making it a versatile tool for these threat actors.

Analyst 207
Third-Party Risk Exposes Bank to Months-Long Cyberespionage Intrusion

Third-Party Risk Exposes Bank to Months-Long Cyberespionage Intrusion

A single misstep with a third-party vendor can have devastating consequences, as seen in a recent cyberespionage case where a European bank fell victim to a months-long intrusion through a poorly configured gateway. The attacker's sloppy tactics, including a noisy reconnaissance campaign, ultimately led to their discovery by Unit 42.

Analyst 207
Rows of computer workstations and monitors display code and network diagrams in a brightly-lit cybersecurity research…

Mustang Panda Unveils Modular FDMTP Backdoor in Cyberespionage Push

Cyberespionage groups like Mustang Panda are constantly evolving their tactics, and a recent campaign has seen the emergence of a modular backdoor that allows attackers to adapt and persist in compromised environments. This sophisticated tool enables hackers to blend in with legitimate processes, making it a major concern for security experts.

Analyst 207
US Department of Justice officials gather in a government building to address a cyberespionage case.

US Charges Chinese Hacker in Cyberespionage Case

The US Department of Justice has extradited Chinese national Xu Zewei from Italy to face charges of conducting cyberespionage operations on behalf of China's intelligence services, targeting victims including COVID-19 researchers. Xu's alleged hacking activities, directed by China's Ministry of State Security, spanned over a year, from February 2020 to June 2021.

Analyst 207
Cisco firewall device on a network equipment rack in a dimly lit data center.

Firestarter Malware Evades Cisco Firewall Updates, Persists Across Reboots

A custom backdoor called Firestarter has been discovered evading Cisco firewall updates and persisting across reboots, posing a significant threat to cybersecurity. This sophisticated malware is attributed to a threat actor linked to cyberespionage campaigns, including the notorious ArcaneDoor operation.

Analyst 207