Skip to content
Threat Feed
Subscribe

Tag

Cyber-Espionage

4 briefs RSS
high advisory

OctLurk and SilkLurk Memory-Resident Backdoors Targeting Central Asia

OctLurk and SilkLurk are sophisticated, memory-resident backdoors targeting government and research entities in Central Asia since January 2025, utilizing machine-specific key derivation for payload decryption and modular plugin injection.

Windows backdoor cyber-espionage memory-resident central-asia chinese-speaking
1r 4t 6i
high threat

Mirage Kitten Targets Middle East and Africa with New Malware

Mirage Kitten, an advanced persistent threat (APT) group, is deploying new Windows backdoor (NightLedger) and WebSocket tunnelers (ArcBridge, BridgeHead) via spear-phishing campaigns to conduct cyber-espionage and data exfiltration against aerospace, aviation, defense, and telecommunications sectors in the Middle East and Europe.

Windows Mirage Kitten cyber-espionage apt malware backdoor tunneler dll-hijacking websocket spear-phishing
4r 13t 3i
high advisory

Multi-Group Espionage Targets Pakistani Law Enforcement via Weaponized Police Portal

Suspected China- and India-aligned threat actors conducted sustained cyber espionage campaigns between February 2024 and April 2026, compromising Pakistani law enforcement organizations' web applications, network appliances, and email gateways, including the Balochistan Police's Complaint Management System to deploy malware like PlugX, ShadowPad, Cobalt Strike, Remcos RAT, a Rust stager (cms_plugin.exe), and AsyncRAT.

FortiMail +2 cyber-espionage nation-state malware rat windows
3r 5t 5i
high threat

WindShift APT Targeting Middle East with OSX.WindTail macOS Implant

The WindShift APT group is targeting Middle Eastern governments with a first-stage macOS implant called OSX.WindTail, abusing custom URL schemes for initial infection and establishing persistence via login items, while decrypting embedded strings to identify file extensions of interest.

OSX.WindTail +2 WindShift macos apt cyber-espionage
2r 1t