/
ttps_attack:T1595.002 × criticity:high × limpar

Resultados

6 casos · pág. 1/1

gbhackers.com · high

Chinese-speaking operator uses Cairn-based autonomous AI agents to breach 100+ e-commerce websites in AIA0001 campaign

A Chinese-speaking operator used autonomous AI agents on the open-source Cairn platform to compromise the websites of more than 100 companies. NorForge tracks the most active campaign as AIA0001: over 1,100 attack projects across 14 dashboards, and more than 1,200 break-in attempts overall. Targets were e-commerce businesses in the United…

cisa.gov · high

Pro-Russia hacktivists (CARR, Z-Pentest, NoName057(16), Sector16) compromise internet-exposed VNC HMIs in critical infrastructure OT

A joint advisory (AA25-343A) from FBI, CISA, NSA and some 18 other US, European, Five Eyes and Czech agencies warns that pro-Russia hacktivist groups are conducting opportunistic, low-sophistication attacks on critical infrastructure OT. The groups named are Cyber Army of Russia Reborn (CARR), Z-Pentest, NoName057(16) and Sector16. They e…

f5.com · exploit público high

F5 Labs: SparkRAT C2 scanning from DigitalOcean and April 2025 CVE exploitation trends, including Fortinet SSL-VPN and SAP NetWeaver

F5 Labs, using Efflux sensor telemetry, reports on the most exploited CVEs of April 2025 and on internet-wide scanning for SparkRAT command-and-control servers. A single actor, using three IPs in DigitalOcean ASN 14061, sent identical HTTP POST requests to the SparkRAT in-place update endpoint, each IP scanning for about 13 hours and reac…

cisa.gov · exploit público high

FSB Center 16 exploits misconfigured SNMP and Cisco routers across critical sectors, joint advisory warns

A joint advisory (AA26-194a) from NSA, CISA, FBI, DC3 and 15 allied agencies warns that Russian FSB Center 16 cyber actors continue to opportunistically compromise poorly configured and vulnerable networking devices worldwide, primarily routers. The advisory builds on the FBI's August 2025 PSA on the decade-plus campaign and adds TTPs. Go…

cisa.gov · high

CISA advisory links Flax Typhoon-style actors to Integrity Tech, detailing XSS, SoftEther persistence and mass email theft in Southeast Asia

A joint advisory (AA26-281A) attributes China-based malicious cyber activity to Integrity Technology Group (Integrity Tech), a for-profit company with links to the Chinese government. The company builds and sells tools, hosts infrastructure and compromises networks worldwide. The actors' TTPs are consistent with Flax Typhoon, Ethereal Pan…