/
ttps_attack:T1087 × criticity:high × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · · 2 fontes · 2 atualizações high

BRONZE SANDCASTLE: suspected China-based cluster uses Sandboxie DLL sideloading and custom backdoors to steal ntds.dit in Asia and Africa

BRONZE SANDCASTLE (written Bronze Sandcastle by thehackernews.com) is a previously undocumented intrusion set disclosed by SophosLabs on 2026-10-21. It is assessed as China-based or China-aligned and has been active since mid-2025 (thehackernews.com). Between August 2025 and August 2026 it compromised victims in the Philippines, Taiwan, A…

BRONZE SANDCASTLE
cisa.gov · high

LAUNDRY BEAR exploits Zimbra CVE-2025-66376 (zero-day since July 2025) to exfiltrate email from Western organizations

A multinational advisory (CISA, NSA, FBI, AIVD, MIVD, NCSC-UK and others) warns that the Russian state-supported APT LAUNDRY BEAR (aka Void Blizzard, TA488) has compromised Western government, defense industrial base and NGO organizations running Zimbra Collaboration Suite (ZCS) since at least July 2025. The campaign uses a view-based XSS…

CVE-2025-66376 LAUNDRY BEAR Void Blizzard government defense