Tag: spear phishing
32 articles
Pakistani-Linked Hacker Group Exclusive: Major India Breach
A Pakistan-linked group called TransparentTribe quietly deployed the DeskRAT trojan to infiltrate Indian government networks, harvesting credentials and sensitive documents over months. The patient, espionage-focused campaign raises urgent questions about when cyber intrusions become acts of war.
PhantomCaptcha Campaign: Stunning Threat to Ukraine Aid
What if the message promising help handed attackers the keys? The PhantomCaptcha campaign did exactly that — a surgical phishing blitz using believable impersonation and innocuous-looking attachments to steal credentials and threaten Ukraine relief efforts.
PhantomCaptcha Campaign Exclusive: Critical Ukraine Threat
Meet the PhantomCaptcha campaign: a short, surgical phishing blitz that tricks aid groups with believable emails and weaponized attachments to steal credentials and install persistent backdoors. The result puts NGOs, local governments and Ukraine relief efforts at risk of disrupted operations, exposed donor and logistics data, and long‑term compromise.
MuddyWater Exclusive: Dangerous Mailbox Phishing Surge
Think your inbox is safe? MuddyWater’s latest phishing wave shows how compromised mailboxes let attackers steal credentials and session tokens, impersonate colleagues, and turn a single click into long‑term espionage across organizations.
APT36 Exclusive: Critical Golang DeskRAT Threat to India
Heres the scoop: a targeted spear-phishing campaign installed DeskRAT—a compact, Golang-based remote access tool linked to APT36—into Indian government systems, letting attackers read emails, capture keystrokes and siphon sensitive files. Lightweight and cross-platform, DeskRAT underscores how APT36’s patient social-engineering playbook keeps compromising high-value targets.
APT36 Exclusive: Golang DeskRAT Threatens India
This autumn, a seemingly innocent spear-phish opened the door to DeskRAT, a Golang-based remote-access trojan tied to APT36 (Transparent Tribe) that slipped into Indian government networks to harvest credentials and siphon documents. Analysts warn the groups move to Go makes these cross-platform implants smaller, stealthier, and tougher to pin down—an unnerving evolution in a decade-long espionage playbook.
APT36 Exclusive: Critical Golang DeskRAT Threat Hits India
Think a phishing email cant threaten national security? In summer 2025, tailored spear-phishing delivered Golang DeskRAT into Indian government networks — a stealthy APT36 tool that turns a single click into a strategic risk.
Ukraine Aid Groups Hit by Exclusive Fake Zoom PDF Attacks
Who do you trust when the envelope itself is the weapon? A campaign called PhantomCaptcha disguised malware inside a Zoom-related PDF, giving attackers stealthy, long-term access to Ukraine aid groups and risking donor data, credentials and field operations.