/
ttps_attack:T1566.001 × limpar

Resultados

6 casos · pág. 1/1

welivesecurity.com · medium

Quishing rises to 11% of phishing emails in H1 2026, evading email filters; Kimsuky uses QR codes against US targets

ESET warns that QR-code phishing ("quishing") is a growing way to slip past corporate email security. According to the ESET Threat Report H1 2026, malicious QR codes were embedded in 11% of all phishing emails in the first half of 2026. The codes hide destination URLs from filters that cannot extract and inspect them, and they move the vi…

blogs.cisco.com · low

Cisco blog traces ILOVEYOU and WannaCry to agentic AI risk and outlines a four-pillar security framework

A Cisco blog post by Renato Morais compares past landmark threats with the emerging risk from autonomous AI agents, then presents Cisco's agentic security reference architecture. It recounts the ILOVEYOU worm (2000), a social-engineering email worm, and WannaCry (2017), a ransomware worm using EternalBlue against unpatched Windows systems…

newsroom.trendmicro.com · low

Trend Micro 2023 annual report: 161B threats blocked, ransomware detections down 14% as attackers shift to evasion and targeted attacks

Trend Micro published its annual threat report, Calibrating Expansion, covering 2023. It reports 161 billion threats blocked, a 10% annual increase. Attackers appear to be targeting fewer, higher-value victims with more sophisticated methods. Email and web reputation blocks fell 47% and 2%, while File Reputation Service detections rose 35…

Silent Lynx (UAT-6275) uses WinRAR CVE-2025-8088 and reverse shells against CIS government targets

Silent Lynx, tracked as UAT-6275 by Cisco Talos and TAG-193 by Recorded Future Insikt Group, has been linked to a new set of attacks on government organizations across the Commonwealth of Independent States. The activity ran from June 2025 through August 2026 and used four infection chains to deploy custom reverse shells (FoalShell, Chvos…

thehackernews.com · high

APT28 (Swallowtail) breaches NATO naval shipbuilder using HOOKEDGE backdoor and new reflective loader

Symantec reports that the Russia-linked APT28 (aka BlueDelta, Fancy Bear, Forest Blizzard), tracked by Symantec as Swallowtail, targeted entities in two NATO member states. Victims include a law enforcement agency, a naval shipbuilder and a manufacturer of military aircraft engines. In the shipbuilder intrusion in late July 2026, operator…