/
initial_access_vector:phishing × victim_sectors:telecommunications × limpar

Resultados

3 casos · pág. 1/1

bleepingcomputer.com · high

Lazarus Group's FlashHole campaign uses ML-KEM post-quantum cryptography to deliver payloads to South Korean organizations

Kaspersky reports a Lazarus Group operation dubbed FlashHole, targeting South Korean organizations since July 2025 with a complex, mostly in-memory infection chain. The attackers use the NIST-standardized ML-KEM-1024 post-quantum key encapsulation mechanism for C2 communications, so that subsequent payloads are delivered encrypted and are…

Iranian-aligned CL-STA-1178 'Blinder Tunnel' campaign hits Iraqi critical infrastructure with trojanized Dubai Airports coding lures

Unit 42 attributes with high confidence to an Iranian state-aligned actor, tracked as CL-STA-1178, a campaign called Blinder Tunnel. In March 2026 it targeted an individual in Iraq's critical infrastructure sector, after infrastructure staging that began as early as November 2025. The actor impersonated the Dubai Airports IT department an…

krebsonsecurity.com · critical

ShinyHunters Suspect Arrested in Netherlands as Group Mass-Exploits Oracle PeopleSoft CVE-2026-35273 and Breaches FBI Jobs Site

Dutch authorities arrested a 24-year-old, reportedly Pepijn van der Stap (alias "Umbreon"), around Sept. 16, 2026 on suspicion of aiding data thefts and extortions by ShinyHunters. Van der Stap was previously convicted in 2023 for data theft and extortion. Days after the arrest, remaining ShinyHunters members escalated, breaching the FBI …