Skip to content
Threat Feed
Subscribe

Tag

Spear-Phishing

5 briefs RSS
high threat

Mirage Kitten Targets Middle East and Africa with New Malware

Mirage Kitten, an advanced persistent threat (APT) group, is deploying new Windows backdoor (NightLedger) and WebSocket tunnelers (ArcBridge, BridgeHead) via spear-phishing campaigns to conduct cyber-espionage and data exfiltration against aerospace, aviation, defense, and telecommunications sectors in the Middle East and Europe.

Windows Mirage Kitten cyber-espionage apt malware backdoor tunneler dll-hijacking websocket spear-phishing
4r 13t 3i
high threat

Kimsuky Targets Organizations with Evolving PebbleDash-Based Tools

Kimsuky, a North Korean APT group, is actively targeting organizations, primarily in South Korea, with evolving tactics and tools, leveraging spear-phishing emails and messenger contacts to deploy malware such as PebbleDash and AppleSeed for establishing backdoors and stealing information.

VSCode +2 Kimsuky +4 apt spear-phishing malware pebbledash appleseed
2r 4t 5i
high threat

BlueNoroff Targeting Web3 Sector via Spear Phishing

BlueNoroff, a subgroup of the Lazarus Group, is targeting North American Web3 companies through spear-phishing campaigns, impersonating Fintech legal professionals.

BlueNoroff +3 spear-phishing web3 cryptocurrency fintech
2r 1t
medium advisory

Gsuite Email with Suspicious Subject and Attachments

Detection of Gsuite emails with suspicious subjects and attachments (e.g., DHL, UPS, invoice, DOC, ZIP) indicative of spear phishing, excluding internal test domains, which could lead to initial compromise and further malicious activity.

Gsuite spear-phishing initial-access
2r 1t 1i
medium advisory

GSuite Email with Suspicious Attachment

This analytic detects GSuite emails with suspicious file attachments (e.g., .exe, .bat, .js) which may indicate a spear-phishing attack leading to malware deployment and potential system compromise.

GSuite +1 spear-phishing malicious-attachment
2r 1t