Search: “APT27”

114 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 31 Threat actor 26 Ransomware 20 Vulnerability 15 Data breach 10 Exploit / PoC 9 Policy & legal 2 Advisory 1

SeverityAll critical 46 high 64 medium 2 low 2 info 0

New China-Aligned Hackers Hit State and Telecom Sectors

Infosecurity MagazineOct 1, 11:00 UTC · Oct 1, 2025Malware

55

UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors

The Hacker NewsSep 25, 15:04 UTC · Sep 25, 2025Malware CVE-2023-46805 CVE-2024-21887

60

After SharePoint attacks, Microsoft stops sharing PoC exploit code with China

Security AffairsAug 22, 09:12 UTC · Aug 22, 2025Exploit / PoC in the wild1

60

ToolShell under siege: Check Point analyzes Chinese APT Storm

Security AffairsAug 1, 11:19 UTC · Aug 1, 2025Ransomware

57

⚡ Weekly Recap — SharePoint Breach, Spyware, IoT Hijacks, DPRK Fraud, Crypto Drains and More

The Hacker NewsJul 28, 15:57 UTC · Jul 28, 2025Malware in the wildCVE-2025-49706 CVE-2025-49704 CVE-2025-20281+27 CVEs

60

Storm-2603 Exploits SharePoint Flaws to Deploy Warlock Ransomware on Unpatched Systems

The Hacker NewsJul 28, 15:57 UTC · Jul 28, 2025Ransomware in the wildCVE-2025-49706 CVE-2025-49704

60

Microsoft linked attacks on SharePoint flaws to China

Security AffairsJul 23, 06:20 UTC · Jul 23, 2025Ransomware CVE-2025-53770

60

Chinese nation-state groups exploiting SharePoint vulnerability, Microsoft confirms

The RecordJul 22, 19:12 UTC · Jul 22, 2025Vulnerability in the wildCVE-2025-49706 CVE-2025-49704 CVE-2025-53770+1 CVEs

60

Microsoft Links Ongoing SharePoint Exploits to Three Chinese Hacker Groups

The Hacker NewsJul 22, 16:43 UTC · Jul 22, 2025Ransomware CVE-2025-49706 CVE-2025-49704 CVE-2025-53771+1 CVEs

60

⚡ THN Weekly Recap: New Attacks, Old Tricks, Bigger Impact

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025Ransomware CVE-2025-25015 CVE-2025-22224 CVE-2025-22225+18 CVEs

60

⚡ Weekly Recap: VPN Exploits, Oracle's Silent Breach, ClickFix Surge and More

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025Data breach CVE-2025-22457 CVE-2025-24061 CVE-2025-2407+15 CVEs

60

U.S. Sanctions Chinese Cybersecurity Firm Over Treasury Hack Tied to Silk Typhoon

The Hacker NewsApr 4, 12:06 UTC · Apr 4, 2025Policy & legal

55

Silk Typhoon Hackers Indicted

Schneier on SecurityMar 11, 17:14 UTC · Mar 11, 2025Policy & legal

30

Silk Typhoon shifted to specifically targeting IT management companies

CyberScoopMar 6, 14:54 UTC · Mar 6, 2025Exploit / PoC in the wildCVE-2025-0282

60

CISA Adds Five-Year-Old jQuery XSS Flaw to Exploited Vulnerabilities List

The Hacker NewsJan 25, 09:42 UTC · Jan 25, 2025Vulnerability in the wildCVE-2020-11023 CVE-2020-11022 CVE-2019-11358

60

Malware report for Q3 2024: threat overview

Kaspersky SecurelistNov 29, 10:45 UTC · Nov 29, 2024Malware

42

New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm

The Hacker NewsSep 5, 05:03 UTC · Sep 5, 2024Malware

42

EastWind Attack Deploys PlugY and GrewApacha Backdoors Using Booby

The Hacker NewsAug 12, 06:40 UTC · Aug 12, 2024Malware

42

Velvet Ant uses F5 BIG

Security AffairsJul 1, 21:29 UTC · Jul 1, 2024Vulnerability

42

APT Expands Attack on ManageEngine With Active Campaign Against ServiceDesk Plus

Palo Alto Unit 42Jun 6, 01:25 UTC · Jun 6, 2024Threat actor in the wildCVE-2021-44077 CVE-2021-33617

60

Inside Operation Diplomatic Specter: Chinese APT Group's Stealthy Tactics Exposed

The Hacker NewsMay 24, 07:49 UTC · May 24, 2024Threat actor

57

Chinese Hackers Target Semiconductor Firms in East Asia with Cobalt Strike

The Hacker NewsOct 9, 02:54 UTC · Oct 9, 2023Malware

55

China-based spies are hacking East Asian semiconductor companies, report says

The RecordOct 6, 15:05 UTC · Oct 6, 2023Malware

42

Budworm APT Evolves Toolset, Targets Telecoms and Government

Infosecurity MagazineSep 28, 17:30 UTC · Sep 28, 2023Malware

42

China-Linked Budworm Targeting Middle Eastern Telco and Asian Government Agencies

The Hacker NewsSep 28, 10:13 UTC · Sep 28, 2023Malware

42

Carderbee APT targets Hong Kong orgs via supply chain attacks

Security AffairsAug 23, 08:21 UTC · Aug 23, 2023Malware

42

Malicious emails aimed at Taiwan have spiked in 2023

The RecordMay 18, 20:32 UTC · May 18, 2023Ransomware

45

Researchers Uncover Powerful Backdoor and Custom Implant in Year

The Hacker NewsMay 17, 05:03 UTC · May 17, 2023Malware

42

Operation Soft Cell: Chinese Hackers Breach Middle East Telecom Providers

The Hacker NewsMar 24, 03:30 UTC · Mar 24, 2023Vulnerability

55

SysUpdate Malware Strikes Again with Linux Version and New Evasion Tactics

The Hacker NewsMar 2, 10:57 UTC · Mar 2, 2023Malware1

42

EU Cybersecurity Agency Warns Against Chinese APTs

Infosecurity MagazineFeb 17, 17:00 UTC · Feb 17, 2023Threat actor

60

Five Southeast Asian telcos hacked by three different Chinese espionage groups

The RecordJan 18, 00:00 UTC · Jan 18, 2023Threat actor

57

Chinese cyber spies targeted Israel posing as Iranian hackers

The RecordJan 18, 00:00 UTC · Jan 18, 2023Data breach CVE-2019-0604

60

Amnesty International breach linked to Chinese government, investigation finds

The RecordJan 9, 00:00 UTC · Jan 9, 2023Data breach CVE-2021-40539

60

PC malware statistics, Q3 2022

Kaspersky SecurelistNov 18, 08:10 UTC · Nov 18, 2022Malware2

42

Budworm Hackers Resurface with New Espionage Attacks Aimed at U.S. Organization

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2022Threat actor

57

FBI, CISA, and NSA Reveal How Hackers Targeted a Defense Industrial Base Organization

The Hacker NewsOct 6, 04:58 UTC · Oct 6, 2022Malware

42

Webworm Hackers Using Modified RATs in Latest Cyber Espionage Attacks

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2022Threat actor

57

Chinese Hackers Used ScanBox Framework in Recent Cyber Espionage Attacks

The Hacker NewsSep 2, 02:43 UTC · Sep 2, 2022Threat actor

57

Luckymouse Uses Compromised MiMi Chat App to Target Windows and Linux Systems

Infosecurity MagazineAug 15, 16:30 UTC · Aug 15, 2022Vulnerability

42