APT42 Hackers Pose as Journalists to Harvest Credentials and Access Cloud Data

May 7, 2024 at 09:57AM Iranian state-backed hacking group APT42 utilizes advanced social engineering tactics to breach target networks and cloud environments. The group impersonates journalists and event organizers to gain trust and steal credentials, operating as part of the larger APT35 group. Their operations involve extensive credential harvesting and data exfiltration while evading detection. … Read more

State-Backed Hackers a Threat to Australia, Agency Warns

November 15, 2023 at 05:39AM Australia’s signals intelligence agency has warned that the country faces an ongoing threat from state-sponsored hackers, particularly from Russia and China. The agency highlighted the danger of cyberattacks on critical infrastructure, such as water supplies and electricity grids. The recently formed AUKUS defense pact with the UK and US could … Read more

Google links WinRAR exploitation to multiple state hacking groups

October 18, 2023 at 11:16AM State-backed hacking groups, including Sandworm, APT28, and APT40, are exploiting a vulnerability in WinRAR to execute arbitrary code on targeted systems. The bug, known as CVE-2023-38831, has been exploited since April 2023, enabling threat actors to deliver various malware payloads. Despite a patch being available, many users remain vulnerable. Google … Read more