#cyber-espionage
#cyber-espionage
[ follow ]
#cybersecurity #malware #china #telecommunications #agentic-ai #lazarus-group #network-security #salt-typhoon
fromwww.bbc.com
4 days agoAI firm claims Chinese spies used its tech to automate cyber attacks
The makers of artificial intelligence (AI) chatbot Claude claim to have caught Chinese government hackers using the tool to perform automated cyber attacks against around 30 global organisations. Anthropic said hackers tricked the chatbot into carrying out automated tasks under the guise of carrying out cyber security research. The company claimed in a blog post this was the "first reported AI-orchestrated cyber espionage campaign".
Artificial intelligence
Information security
fromTechCrunch
6 days agoAustralian spy chief warns Chinese hackers are 'probing' critical networks for espionage and sabotage | TechCrunch
China-backed hacking groups are probing and sometimes accessing Australia's critical infrastructure, pre-positioning malware for potential sabotage and espionage.
Information security
fromThe Hacker News
2 weeks agoWeekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & More
Cyberattacks are increasingly sophisticated, exploiting new vulnerabilities, trusted systems, and encrypted backups to conduct espionage, ransomware, and phishing across diverse targets.
fromThe Hacker News
3 weeks agoNorth Korean Hackers Lure Defense Engineers With Fake Jobs to Steal Drone Secrets
Some of these [companies' are heavily involved in the unmanned aerial vehicle (UAV) sector, suggesting that the operation may be linked to North Korea's current efforts to scale up its drone program," ESET security researchers Peter Kálnai and Alexis Rapin said in a report shared with The Hacker News. It's assessed that the end goal of the campaign is to plunder proprietary information and manufacturing know-how using malware families such as ScoringMathTea and MISTPEN.
Information security
fromThe Hacker News
3 weeks agoResearchers Identify PassiveNeuron APT Using Neursite and NeuralExecutor Malware
The cyber espionage activity was first flagged by the Russian cybersecurity vendor in November 2024, when it disclosed a set of attacks aimed at government entities in Latin America and East Asia in June, using never-before-seen malware families tracked as Neursite and NeuralExecutor. It also described the operation as exhibiting a high level of sophistication, with the threat actors leveraging already compromised internal servers as an intermediate command-and-control (C2) infrastructure to fly under the radar.
Information security
Information security
fromThe Hacker News
1 month agoUNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors
A suspected China-nexus cyber espionage group used the BRICKSTORM backdoor to maintain long-term access to U.S. legal, SaaS, BPO, and technology organizations and steal data.
Information security
fromThe Hacker News
2 months agoResearchers Warn of MystRodX Backdoor Using DNS and ICMP Triggers for Stealthy Control
MystRodX is a stealthy, flexible C++ backdoor that uses layered encryption, passive wake-up triggers via DNS/ICMP, and modular capabilities for remote control and data capture.
Information security
fromThe Hacker News
2 months agoAmazon Disrupts APT29 Watering Hole Campaign Abusing Microsoft Device Code Authentication
Russia-linked APT29 ran a watering hole campaign redirecting visitors to attacker-controlled domains to trick users into authorizing devices via Microsoft's device code authentication flow.
fromThe Hacker News
3 months agoFire Ant Exploits VMware Flaws to Compromise ESXi Hosts and vCenter Environments
The threat actor leveraged combinations of sophisticated and stealthy techniques creating multilayered attack kill chains to facilitate access to restricted and segmented network assets within presumed to be isolated environments.
Information security
fromSecuritymagazine
4 months agoThreat Actor Targeting Indian Defense Sector
APT36's focus on Linux-specific systems, particularly those used in government infrastructure, reinforces that no operating system is off-limits to nation-state attackers. This kind of multi-layered phishing attack highlights how threat actors are constantly evolving their tactics to quietly bypass defenses and exploit user trust.
Privacy professionals
[ Load more ]