Turla uses Cereal malware to steal email from government Exchange servers
ESET says the modular .NET toolset hit two government entities in Kazakhstan and Romania in late 2025, with no external C2.
1
Stories per day · 30 days
2 RSS
Relatedbitter2paprat2ta3972agentic-frameworks1ai-agents1art-ex1assad-regime1automated-intrusions1cereal1data-breach1email-theft1living-off-the-land1llm-abuse1microsoft-exchange1pentesting1south-asia1state-sponsored-hacking1syria1
11 stories, newest first · one card per story
Stories tagged #cyber-espionage
Hacker deploys 12 AI agents for Taiwan cyber attacks
One operator in Taiwan used 12 AI agents to breach emergency services in Taiwan and steal medical data from hundreds of organizations across 11 countries.
3
Syrian Hacker Sentenced for Assad Regime Hacking Conspiracy
The Syrian man was sentenced to 42 months in prison for hacking 47 Western media entities, businesses, NGOs, and US government targets on behalf of the Assad regime.
1
BITTER uses PapRAT in Windows espionage against South Asia
FortiGuard Labs, with high confidence, describes three infection chains and a Rust rebuild that adds PowerShell, sleep and exit commands.
Threat Actors Abuse Agentic Frameworks ARTEX and CAIRN for Automated Intrusions
Mandiant and GTIG observe ARTEX, Hexstrike, and CAIRN used by threat actors in live incidents since August 2026, enabling rapid lateral movement and exfiltration.
2
Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift
Cyber-espionage actor UAC-0099 has upgraded its MatchBoil dropper with stealthier capabilities for ongoing campaigns against Ukrainian organizations.
Operation Conflict Compass: Konni Targets Ukraine via Malicious LNK Lures
Konni APT targets Ukraine with malicious LNK lures in 'Conflict Compass' campaign, using JavaScript and PowerShell for initial access.
1
Cyber Op Targets South Korean Media & Automotive Sectors
Likely North Korean APT compromised load balancers at South Korean media and automotive firms using a previously undocumented Linux espionage toolkit.
US charges Iranians for sprawling hacking campaign on government agencies, universities
DOJ indicts 17 Iranians tied to Mabna Institute IRGC hacking-for-hire campaign that stole 31TB from universities, agencies, and UN organizations.
2
Operation QUICSILVER Targets Myanmar Government and IT with QUICAgent Backdoor
Seqrite Labs details Operation QUICSILVER, a China-nexus espionage campaign targeting Myanmar government and IT with graduation-invite lures deploying QUICAgent backdoor.
4
Eight years later, federal authorities re-up charges against alleged Iranian hackers at Mabna Institute
US prosecutors unsealed a superseding indictment charging 17 Iranians in the Mabna Institute's state-sponsored theft of 31.5 terabytes from universities and companies.
1