Nation-State - Security Ticks

Freelance Software Developers in North Korean Malware Crosshairs

AnyDesk, DeceptiveDevelopment, ESET, fake IT workers, LinkedIn, Malware & Threats, Nation-State, North Korea / SecurityTicks

Freelance Software Developers in North Korean Malware Crosshairs 2025-02-21 at 18:01 By Ionut Arghire ESET says hundreds of freelance software developers have fallen victim to North Korean hackers posing as recruiters. The post Freelance Software Developers in North Korean Malware Crosshairs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source […]

React to this headline:

Freelance Software Developers in North Korean Malware Crosshairs Read More »

Cisco Details ‘Salt Typhoon’ Network Hopping, Credential Theft Tactics

China, Cisco, Cisco Talos, CVE-2018-0171, Nation-State, Salt Typhoon, Vulnerabilities / SecurityTicks

Cisco Details ‘Salt Typhoon’ Network Hopping, Credential Theft Tactics 2025-02-21 at 17:04 By Ryan Naraine Cisco Talos observed Chinese hackers team pivoting from a compromised device operated by one telecom to target a device in another telecom. The post Cisco Details ‘Salt Typhoon’ Network Hopping, Credential Theft Tactics appeared first on SecurityWeek. This article is

React to this headline:

Cisco Details ‘Salt Typhoon’ Network Hopping, Credential Theft Tactics Read More »

How China Pinned University Cyberattacks on NSA Hackers

China, cyberespionage, Equation Group, Featured, Nation-State, NSA, university / SecurityTicks

How China Pinned University Cyberattacks on NSA Hackers 2025-02-21 at 14:34 By Ionut Arghire A researcher dives into Chinese reports attributing cyberattacks on Northwestern Polytechnical University to the NSA’s TAO division. The post How China Pinned University Cyberattacks on NSA Hackers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React to this headline:

How China Pinned University Cyberattacks on NSA Hackers Read More »

Chinese APT Tools Found in Ransomware Schemes, Blurring Attribution Lines

APT41, China APT, cybercrime, Malware & Threats, Nation-State, PlugX, Ransomware, Shadowpad, Symantec, Trend Micro / SecurityTicks

Chinese APT Tools Found in Ransomware Schemes, Blurring Attribution Lines 2025-02-20 at 19:29 By Ryan Naraine China-linked cyberespionage toolkits are popping up in ransomware attacks, forcing defenders to rethink how they combat state-backed hackers. The post Chinese APT Tools Found in Ransomware Schemes, Blurring Attribution Lines appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Chinese APT Tools Found in Ransomware Schemes, Blurring Attribution Lines Read More »

How Russian Hackers Are Exploiting Signal ‘Linked Devices’ Feature for Real-Time Spying

APT44, cyberespionage, Malware & Threats, Mandiant, Nation-State, QR code, Sandworm, Signal Messenger / SecurityTicks

How Russian Hackers Are Exploiting Signal ‘Linked Devices’ Feature for Real-Time Spying 2025-02-19 at 13:04 By Ryan Naraine Mandiant warns that multiple Russian APTs are abusing a nifty Signal Messenger feature to surreptitiously spy on encrypted conversations. The post How Russian Hackers Are Exploiting Signal ‘Linked Devices’ Feature for Real-Time Spying appeared first on SecurityWeek.

React to this headline:

How Russian Hackers Are Exploiting Signal ‘Linked Devices’ Feature for Real-Time Spying Read More »

Russian State Hackers Target Organizations With Device Code Phishing

device code phishing, Microsoft, Nation-State, phishing, Russia, Storm-2372 / SecurityTicks

Russian State Hackers Target Organizations With Device Code Phishing 2025-02-17 at 14:49 By Ionut Arghire Russian hackers have been targeting government, defense, telecoms, and other organizations in a device code phishing campaign. The post Russian State Hackers Target Organizations With Device Code Phishing appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

React to this headline:

Russian State Hackers Target Organizations With Device Code Phishing Read More »

Salt Typhoon Targeting Old Cisco Vulnerabilities in Fresh Telecom Hacks

China, Nation-State, Salt Typhoon, telecoms / SecurityTicks

Salt Typhoon Targeting Old Cisco Vulnerabilities in Fresh Telecom Hacks 2025-02-14 at 14:05 By Ionut Arghire China-linked APT Salt Typhoon has been exploiting known vulnerabilities in Cisco devices in attacks on telecom providers in the US and abroad. The post Salt Typhoon Targeting Old Cisco Vulnerabilities in Fresh Telecom Hacks appeared first on SecurityWeek. This

React to this headline:

Salt Typhoon Targeting Old Cisco Vulnerabilities in Fresh Telecom Hacks Read More »

Rapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust Exploitation

BeyondTrust, CVE-2024-12356, CVE-2025-1094, Nation-State, Rapid7, Treasury, Vulnerabilities / SecurityTicks

Rapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust Exploitation 2025-02-13 at 22:20 By Ryan Naraine Rapid7 finds a new zero-day vulnerability in PostgreSQL and links it to chain of attacks against a BeyondTrust Remote Support product. The post Rapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust Exploitation appeared first on SecurityWeek. This article is an

React to this headline:

Rapid7 Flags New PostgreSQL Zero-Day Connected to BeyondTrust Exploitation Read More »

Italian Government Denies It spied on Journalists and Migrant Activists Using Paragon Spyware

Mobile & Wireless, Nation-State, spyware / SecurityTicks

Italian Government Denies It spied on Journalists and Migrant Activists Using Paragon Spyware 2025-02-12 at 22:00 By Associated Press The Italian government denied it hacked seven cellphones with military-grade surveillance technology from Paragon Solutions. The post Italian Government Denies It spied on Journalists and Migrant Activists Using Paragon Spyware appeared first on SecurityWeek. This article

React to this headline:

Italian Government Denies It spied on Journalists and Migrant Activists Using Paragon Spyware Read More »

Russian Seashell Blizzard Hackers Gain, Maintain Access to High-Value Targets: Microsoft

APT44, Microsoft, Nation-State, Russia, Sandworm, Seashell Blizzard / SecurityTicks

Russian Seashell Blizzard Hackers Gain, Maintain Access to High-Value Targets: Microsoft 2025-02-12 at 19:10 By Ionut Arghire A subgroup of the Russia-linked Seashell Blizzard is tasked with broad initial access operations to sustain long-term persistence. The post Russian Seashell Blizzard Hackers Gain, Maintain Access to High-Value Targets: Microsoft appeared first on SecurityWeek. This article is

React to this headline:

Russian Seashell Blizzard Hackers Gain, Maintain Access to High-Value Targets: Microsoft Read More »

Apple Confirms USB Restricted Mode Exploited in ‘Extremely Sophisticated’ Attack

apple, Citizen Lab, CVE-2025-24200, iOS, iOS 18.3.1, Malware & Threats, Nation-State, USB Restricted Mode / SecurityTicks

Apple Confirms USB Restricted Mode Exploited in ‘Extremely Sophisticated’ Attack 2025-02-10 at 22:01 By Ryan Naraine Cupertino’s security response team said the flaw was used in “an extremely sophisticated attack against specific targeted individuals.” The post Apple Confirms USB Restricted Mode Exploited in ‘Extremely Sophisticated’ Attack appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Apple Confirms USB Restricted Mode Exploited in ‘Extremely Sophisticated’ Attack Read More »

North Korean Fake IT Workers More Aggressively Extorting Enterprises

fake IT workers, FBI, Nation-State, North Korea / SecurityTicks

North Korean Fake IT Workers More Aggressively Extorting Enterprises 2025-01-24 at 18:01 By Ionut Arghire North Korean fake IT workers are more aggressively extorting their employers in response to law enforcement actions. The post North Korean Fake IT Workers More Aggressively Extorting Enterprises appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

React to this headline:

North Korean Fake IT Workers More Aggressively Extorting Enterprises Read More »

North Korea Hackers Linked to Breach of German Missile Manufacturer

APT43, Diehl Defence, Kimsuky, Mandiant, Nation-State, North Korea, phishing / SecurityTicks

North Korea Hackers Linked to Breach of German Missile Manufacturer 2024-09-30 at 20:46 By Ryan Naraine The targeting of Diehl Defence is significant because the company specializes in the production of missiles and ammunition. The post North Korea Hackers Linked to Breach of German Missile Manufacturer appeared first on SecurityWeek. This article is an excerpt

React to this headline:

North Korea Hackers Linked to Breach of German Missile Manufacturer Read More »

US Charges 3 Iranians Over Presidential Campaign Hacking

charged, Election, Iran, Nation-State, Sanctions / SecurityTicks

US Charges 3 Iranians Over Presidential Campaign Hacking 2024-09-30 at 15:06 By Eduard Kovacs The US has announced charges, sanctions and a $10 million reward for Iranian hackers accused of targeting elections. The post US Charges 3 Iranians Over Presidential Campaign Hacking appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

US Charges 3 Iranians Over Presidential Campaign Hacking Read More »

In Other News: Salt Typhoon Hacks US ISPs, China Doxes Hackers, New Tool for AI Attacks

In Other News, Nation-State / SecurityTicks

In Other News: Salt Typhoon Hacks US ISPs, China Doxes Hackers, New Tool for AI Attacks 2024-09-27 at 17:31 By SecurityWeek News Noteworthy stories that might have slipped under the radar: China’s Salt Typhoon has hacked US ISPs, China has doxed Taiwanese hackers, and Bishop Fox has a new tool for AI attacks. The post

React to this headline:

In Other News: Salt Typhoon Hacks US ISPs, China Doxes Hackers, New Tool for AI Attacks Read More »

India-Linked Hackers Targeting Pakistani Government, Law Enforcement

India, Nation-State, Pakistan, SloppyLemming / SecurityTicks

India-Linked Hackers Targeting Pakistani Government, Law Enforcement 2024-09-25 at 15:46 By Ionut Arghire The India-linked threat actor SloppyLemming has been targeting government, law enforcement, and other entities in Pakistan. The post India-Linked Hackers Targeting Pakistani Government, Law Enforcement appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

India-Linked Hackers Targeting Pakistani Government, Law Enforcement Read More »

Iran Was Behind Thousands of Text Messages Calling for Revenge Over Quran Burnings, Sweden Says

Iran, Nation-State, SMS, Sweden / SecurityTicks

Iran Was Behind Thousands of Text Messages Calling for Revenge Over Quran Burnings, Sweden Says 2024-09-25 at 12:31 By Associated Press Sweden is accusing Iran of hacking SMS service and sending out thousands of text messages calling for revenge over Quran burnings. The post Iran Was Behind Thousands of Text Messages Calling for Revenge Over

React to this headline:

Iran Was Behind Thousands of Text Messages Calling for Revenge Over Quran Burnings, Sweden Says Read More »

Iranian APT Operating as Initial Access Provider to Networks in the Middle East

APT34, Iran, Mandiant, Nation-State, UNC1860 / SecurityTicks

Iranian APT Operating as Initial Access Provider to Networks in the Middle East 2024-09-24 at 19:01 By Ionut Arghire Iranian state-sponsored threat actor UNC1860 is operating as an initial access provider to high-profile networks in the Middle East. The post Iranian APT Operating as Initial Access Provider to Networks in the Middle East appeared first

React to this headline:

Iranian APT Operating as Initial Access Provider to Networks in the Middle East Read More »

Mandiant Offers Clues to Spotting and Stopping North Korean Fake IT Workers

China, Fraud & Identity Theft, KnowBe4, Mandiant, Nation-State, North Korea, Russia, UNC5267 / SecurityTicks

Mandiant Offers Clues to Spotting and Stopping North Korean Fake IT Workers 2024-09-23 at 20:31 By Ryan Naraine Mandiant shines the spotlight on the growing infiltration of US and Western companies by North Korean fake IT workers. The post Mandiant Offers Clues to Spotting and Stopping North Korean Fake IT Workers appeared first on SecurityWeek.

React to this headline:

Mandiant Offers Clues to Spotting and Stopping North Korean Fake IT Workers Read More »

US Disrupts ‘Raptor Train’ Botnet of Chinese APT Flax Typhoon

botnet, China, Featured, Flax Typhoon, Nation-State, Raptor Train, takedown, Tracking & Law Enforcement / SecurityTicks

US Disrupts ‘Raptor Train’ Botnet of Chinese APT Flax Typhoon 2024-09-19 at 13:16 By Eduard Kovacs The US government has announced the disruption of Raptor Train, a Flax Typhoon botnet powered by hacked consumer devices. The post US Disrupts ‘Raptor Train’ Botnet of Chinese APT Flax Typhoon appeared first on SecurityWeek. This article is an

React to this headline:

US Disrupts ‘Raptor Train’ Botnet of Chinese APT Flax Typhoon Read More »