Japanese Ministry of Foreign Affairs
February 5, 2024
•[ leak, espionage, government ]
A government source reveals that classified Japanese diplomatic documents were leaked after a Chinese cyberattacks on the Ministry of Foreign Affairs.
Hewlett Packard Enterprise (HPE)
January 23, 2024
•[ hack, espionage, malware ]
Hewlett Packard Enterprise (HPE) discloses that suspected Russian hackers known as Midnight Blizzard gained access to the company's Microsoft Office 365 email environment to steal data from its cybersecurity team and other departments.
Russian Ministry of Defense (Minoborony)
March 4, 2024
•[ espionage, government ]
The Main Intelligence Directorate (GUR) of Ukraine's Ministry of Defense claims that it breached the servers of the Russian Ministry of Defense (Minoborony) and stole sensitive documents.
Organization in the defense sector
February 19, 2024
•[ espionage, malware, technology ]
Germany's federal intelligence agency (BfV) and South Korea's National Intelligence Service (NIS) warn that Lazarus group's "Operation Dream Job," was also used against the defense sector.
Lithuania
March 8, 2024
•[ espionage, government ]
A report published by Lithuanian security services warne that China has escalated its espionage operations against Lithuania.
Organizations in Japan
February 28, 2024
•[ espionage, malware, technology ]
Japan's Computer Security Incident Response Team (JPCERT/CC) warns that the notorious North Korean hacking group Lazarus has uploaded four malicious PyPI packages to infect developers with malware.
Multiple government agencies in the Philippines
February 2, 2024
•[ espionage, government ]
Government agencies in the Philippines announce they had repelled a cyberattack from threat actors suspected to be based in China.
Loïc Lawson and Anani Sossou
January 16, 2024
•[ espionage, malware, technology ]
Reporters Without Borders (RSF) announces to have found traces of spyware resembling NSO groups Pegasus surveillance tool on the phones of two journalists in Togo (Loc Lawson and Anani Sossou).
Telcos, media, internet service providers (ISPs), and Kurdish websites in the Netherlands
January 3, 2024
•[ espionage, technology ]
Researchers from Hunt & Hackett reveal that the Turkish state-backed cyber espionage group tracked as Sea Turtle has been carrying out multiple spying campaigns in the Netherlands, focusing on telcos, media, internet service providers (ISPs), and Kurdish websites.
Albanian Parliament
December 22, 2023
•[ espionage, government ]
The Albanian parliament is targeted by a cyber attack, whose responsibility is claimed by an Iran-linked threat group known as Homeland Justice.
Prominent journalists in India including Siddharth Varadarajan, and Anand Mangnale
December 28, 2023
•[ espionage, malware, technology ]
Amnesty International reveals new details about the continued use of NSO Group's highly invasive spyware Pegasus to target prominent journalists in India, exploiting the CVE-2023-41064 vulnerability.
Russian agro-industrial in Russia
December 19, 2023
•[ espionage, malware, manufacturing ]
Researchers from F.A.C.C.T. discover a new campaign from the threat group known as Cloud Atlas, targeting a Russian agro-industrial enterprise in a new espionage campaign.
Nepalese government officials
December 15, 2023
•[ espionage, malware, government ]
Researchers from Cyfirma discover a malicious campaign by the threat actor known as Sidewinder targeting Nepalese government officials via the Nim backdoor.
State-owned research company in Russia
December 19, 2023
•[ espionage, government ]
Researchers from F.A.C.C.T. discover a new campaign from the threat group known as Cloud Atlas, targeting a state-owned research company in a new espionage campaign.
Organizations in Palestine
December 14, 2023
•[ espionage, malware ]
Researchers from SentinelOne discover a new campaign by the pro-Hamas threat actor known as Gaza Cybergang, targeting Palestinian entities using Pierogi++, an updated version of a backdoor dubbed Pierogi.
Organizations in israel
December 14, 2023
•[ espionage, malware, government ]
Researchers from ESET discover a new campaign from the APT34 cyber-espionage group linked to the Iranian government against organizations in Israel and leveraging several new malware downloaders: ODAgent, OilCheck and OilBooster.
Telecommunications companies predominantly in Thailand
December 7, 2023
•[ espionage, malware, technology ]
Researchers from Group-IB discover a remote access trojan named Krasue, targeting Linux systems of telecommunications companies predominantly in Thailand, and managed to remain undetected since 2021.
Russia's Federal Air Transport Agency (Rosaviatsia)
November 23, 2023
•[ hack, espionage, government ]
Ukraine's intelligence service, operating under the Defense Ministry, claims they hacked Russia's Federal Air Transport Agency, 'Rosaviatsia,' to expose a purported collapse of Russia's aviation sector.
Sellafield Nuclear Waste and Decommissioning Site
December 4, 2023
•[ hack, espionage, energy ]
Threat actors linked to Russia and China have allegedly hacked into the systems of the Sellafield nuclear waste and decommissioning site in the UK, according to an investigation conducted by The Guardian. However, the British government has dismissed the reports.
Russian military-industrial enterprises
November 23, 2023
•[ espionage, government ]
Researchers from F.A.C.C.T. discover a new campaign by the cyberespionage group known as XDSpy, targeting Russian military-industrial enterprises.
