Latest cybersecurity reporting from selected sources.

Cisco Talos said China-linked APT UAT-7810 is growing its proxy relay network with new malware

Bitdefender said the sophisticated multi-stage operation allowed attackers to maintain persistent access and steal sensitive data from a Philippines military company

APT-C-60 targets Japan with phishing emails, using job application ruse and malware via Google Drive

New Linux malware WolfsBane and FireWood have been linked to Gelsemium APT, a cyber-espionage group targeting critical systems

Lazarus APT has been found smuggling malware onto macOS devices using custom extended attributes, evading detection

North Korean APT Stonefly continues to launch cyber-attacks on US firms despite July indictment

The malware issues commands via a hardcoded charcode table and Microsoft COM object interfaces

An earlier publication by Check Point Research had already linked Rafel to the APT-C-35/DoNot Team

Legitimate software used to deploy backdoor malware

Adlumin said the malware combines elements of off-the-shelf threats and APT tactics

Deployed malware aims to steal internal documents from CIS government and diplomatic entities

Symantec described the findings today, saying the ongoing campaign likely started in November 2022

The hacker breached the DLP company's internal update servers to deliver malware within its network

BRATA now targeting a specific financial institution at a time