Vendor

Infosecurity Magazine

0 mentions in 7 days · 4 in 30 days · 4 total · first seen Aug 21, 2026 · last 13d ago

Timeline4 articles

Gambling Goblin Turns Brazilian Government Sites Into SEO Weapons

Check Point links Chinese-speaking cluster Gambling Goblin to SEO-fraud compromises of Brazilian government sites via malicious Apache modules since mid-2025.

Check Point Research dubbed the cluster Gambling Goblin and linked it with medium-to-high confidence to Earth Berberoka, a Chinese-speaking group Trend Micro documented in 2022, citing shared oRAT tooling, Chinese-language artifacts, and domains mimicking trusted tech brands. Custom Apache modules installed on compromised Brazilian government and education servers acted as reverse proxies, routing selected visitors to gambling and sports-betting phishing pages impersonating Google Play, the Microsoft Store, and Amazon while stripping CSP headers. The broader Linux toolkit included the DownPro downloader, AlphaAgent and oRAT backdoors, the 3snake-based PasswordHarvester credential stealer, and an SSH brute-forcer, with operations extending to Vietnamese, Spanish, and English phishing pages.

Infosecurity MagazineSep 2, 14:00 UTC · 13d agoThreat actor

North Korean Hackers Tied to Rust Supply Chain Attack

Researchers linked a backdoor hidden in compromised Rust packages to North Korean actors' prior software supply chain attack campaigns.

Cybersecurity researchers attributed a malicious backdoor planted in compromised Rust packages to North Korean threat actors based on ties to earlier supply chain attacks. The campaign targets the open-source developer ecosystem, where infected packages can propagate downstream to developer build systems. The attribution suggests DPRK-aligned actors continue investing in open-source supply chain tradecraft.

Infosecurity MagazineAug 21, 12:40 UTC · 25d agoThreat actor in the wild

New Agent Tesla Malware Variant Boosts Evasion Capabilities

KnowBe4 documented an Agent Tesla v4 campaign using emoji-based code obfuscation to evade detection.

KnowBe4 researchers reported a campaign distributing Agent Tesla v4, a long-running Windows keylogger and infostealer. The new variant uses emoji-based code obfuscation, a novel technique, to hinder static analysis and evade security tooling. Defenders should watch for behavioral indicators such as credential theft and unusual process activity.

Infosecurity MagazineAug 21, 12:00 UTC · 26d agoMalware in the wild

Cybersecurity Job Ads Requiring AI Skills Double

AI Workforce Consortium analysis finds cybersecurity job postings requiring AI skills have doubled as technical roles turn strategic.

An analysis by the AI Workforce Consortium reports that the share of cybersecurity job advertisements requiring AI skills has doubled. The findings indicate technical security roles are becoming more strategic as AI reshapes the profession. The data is a signal for workforce planning and upskilling priorities across the industry.

Infosecurity MagazineAug 21, 08:00 UTC · 26d agoIndustry

Appears with

threat actor Earth Berberoka 1 threat actor Gambling Goblin 1 threat actor North Korean threat actors 1 malware Agent Tesla 1 malware AlphaAgent 1 malware DownPro 1 malware oRAT 1 malware PasswordHarvester 1 malware Rust backdoor 1 organization AI Workforce Consortium 1 product Apache 1 product Rust 1 vendor AI Workforce Consortium 1 vendor Check Point Research 1 vendor KnowBe4 1 vendor Trend Micro 1

Entities are extracted by the model from each article. Watching an entity keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.