china
This group has primarily targeted governmental entities across the Middle East, Africa, and Asia, focusing on diplomatic and economic missions, embassies, military operations, and political meetings.
apt
Their primary motivation is financial gain, focusing on sectors rich in valuable data and assets...
iran
Fox Kitten is identified as the most significant threat due to its extensive involvement in ransomware attacks and its ability to monetize access to compromised networks. The group has been active since 2017...
north-korea
This article explores the tactics employed by North Korean IT workers, the risks they pose, and advanced threat detection tools and incident response plans tailored to counter their activities.
threat-actors
This group has been observed deploying various ransomware families and utilizing sophisticated techniques to evade detection and maximize their impact...
apt
Mustang Panda is a well-known cyber espionage group believed to be based in China. The group is notorious for targeting government entities, non-governmental organizations (NGOs), and private sector organizations, primarily through spear-phishing campaigns and custom malware.
2024
These workers often operate globally, leveraging their positions to further the objectives of the North Korean government and its cyber warfare units..
threat-actors
Onyx Sleet, also known by aliases such as Andariel, Plutonium, and Silent Chollima, is a North Korean cyber threat actor involved in cyber espionage and targeting critical sectors, including nuclear technology.
orb-networks
Orb networks, also known as Operational Relay Box (ORB) networks, are sophisticated proxy networks used by APT groups, particularly Chinese cyber-espionage actors, to obfuscate their activities and evade detection.
rootkit
Rootkits are a particularly insidious type of malware designed to hide the existence of certain processes or programs from normal methods of detection and enable continued privileged access to a computer.