6 casos · pág. 1/1
An actor using the handle Liberland is advertising a hosting service branded Libre, offering "bulletproof" or abuse-resistant VPS and VDS servers. The listing claims no registration, no email, no KYC and no logs, with cryptocurrency payments including XMR, and rental terms starting at one month. Customers get full root access, multiple op…
CISA and the UK NCSC, with co-sealing partners, published advisory AA26-113A on China-nexus cyber actors' use of large, dynamic covert networks of compromised devices, mainly SOHO routers and IoT devices. These networks are shared by multiple threat actors and each may contain hundreds of thousands of endpoints. This makes static IP block…
Proofpoint disclosed an active campaign, tracked as UNKCondorFiltration, that used the TeamFiltration offensive framework against more than 5,700 accounts across 28 Microsoft 365 tenants. It focused mainly on Chilean retail and financial institutions and originated from 1,487 unique AWS EC2 IP addresses. Seven accounts were compromised, a…
A joint advisory (AA25-343A) from FBI, CISA, NSA and some 18 other US, European, Five Eyes and Czech agencies warns that pro-Russia hacktivist groups are conducting opportunistic, low-sophistication attacks on critical infrastructure OT. The groups named are Cyber Army of Russia Reborn (CARR), Z-Pentest, NoName057(16) and Sector16. They e…
A joint advisory (AA26-194a) from NSA, CISA, FBI, DC3 and 15 allied agencies warns that Russian FSB Center 16 cyber actors continue to opportunistically compromise poorly configured and vulnerable networking devices worldwide, primarily routers. The advisory builds on the FBI's August 2025 PSA on the decade-plus campaign and adds TTPs. Go…
A multinational advisory (CISA, NSA, FBI, AIVD, MIVD, NCSC-UK and others) warns that the Russian state-supported APT LAUNDRY BEAR (aka Void Blizzard, TA488) has compromised Western government, defense industrial base and NGO organizations running Zimbra Collaboration Suite (ZCS) since at least July 2025. The campaign uses a view-based XSS…
