Skip to content
Threat Feed

Tag

Nation-State

3 briefs RSS
critical threat

Targeting and Compromise of French Entities Using the Turla Intrusion Set

The Turla intrusion set, operated by the 16th Centre of the Federal Security Service (FSB) of Russia, has been targeting French entities and other strategic organizations globally since at least 2004 for intelligence-gathering purposes, with victims in France including ministries and entities within the diplomatic, defence, justice, and technology sectors.

Turla +4 nation-state espionage APT russia france
high advisory

Multi-Group Espionage Targets Pakistani Law Enforcement via Weaponized Police Portal

Suspected China- and India-aligned threat actors conducted sustained cyber espionage campaigns between February 2024 and April 2026, compromising Pakistani law enforcement organizations' web applications, network appliances, and email gateways, including the Balochistan Police's Complaint Management System to deploy malware like PlugX, ShadowPad, Cobalt Strike, Remcos RAT, a Rust stager (cms_plugin.exe), and AsyncRAT.

FortiMail +2 cyber-espionage nation-state malware rat windows
3r 5t 5i
high advisory

Rival Espionage Actors Converge on Pakistani Law Enforcement

Suspected China- and India-nexus threat actors conducted separate cyberespionage operations against several Pakistani law enforcement organizations, including Balochistan Police, from February 2024 to April 2026, compromising web applications and network appliances with tools like PlugX, ShadowPad, Cobalt Strike, and Remcos to exfiltrate sensitive criminal and biometric data.

web applications +2 cyberespionage nation-state data-exfiltration web-application command-and-control malware
1r 7t 13i