/
ttps_attack:T1003.003 × criticity:high × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · · 2 fontes · 2 atualizações high

BRONZE SANDCASTLE: suspected China-based cluster uses Sandboxie DLL sideloading and custom backdoors to steal ntds.dit in Asia and Africa

BRONZE SANDCASTLE (written Bronze Sandcastle by thehackernews.com) is a previously undocumented intrusion set disclosed by SophosLabs on 2026-10-21. It is assessed as China-based or China-aligned and has been active since mid-2025 (thehackernews.com). Between August 2025 and August 2026 it compromised victims in the Philippines, Taiwan, A…

BRONZE SANDCASTLE
cisa.gov · high

CISA and FBI #StopRansomware advisory on Gunra, a Conti-derived RaaS exploiting Fortinet and VPN flaws for double extortion

The FBI, CISA, DC3, NSA, USSS and the Republic of Korea's KNPA issued joint advisory AA26-222A on Gunra ransomware. Gunra appeared in April 2025 as a double-extortion variant derived from the leaked Conti source code. It launched a structured RaaS affiliate program in January 2026, also operating under the alias Golden Community, and recr…

CVE-2024-55591 CVE-2025-24472 Gunra Golden Community healthcare financial services