Tag
Integrity Technology Group Enabling Global Cyber Espionage
2 TTPsThe NCSC and international partners have exposed Integrity Technology Group for facilitating global cyber espionage campaigns through AI-powered scanning, large-scale botnets, and manual network exploitation.
China-Linked Espionage Campaign Targeting Global Infrastructure via Integrity Technology Group
3 TTPs 6 CVEs 2 IOCsIntegrity Technology Group, a Chinese for-profit entity, is conducting multi-year cyber espionage targeting government, healthcare, and religious institutions using automated vulnerability scanning, credential harvesting, and specialized data exfiltration tools.
Silver Fox Counterfeit Installer Campaign
3 TTPs 2 IOCsAn active campaign impersonates legitimate software vendors via look-alike websites to distribute dynamically generated malicious installers that evade detection and establish persistent access.
Jewelbug APT Dual-Purpose Espionage and Fraud Operations
3 TTPsJewelbug, a China-linked mercenary APT, uses a custom C2 platform called XG-Web to conduct both state-sponsored espionage and large-scale cryptocurrency theft using custom backdoors and malicious browser extensions.
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft
2 rules 10 TTPsCylindricalCanine, a subgroup of GoldenEyeDog, breached DigiCert in April 2026 by delivering a malicious executable via a customer chat channel, leading to the theft of code-signing certificates which were then used to sign Golden Gh0st RAT malware for distribution, primarily targeting finance organizations and the gambling and gaming sectors.