Telecommunications and IT service providers in the Middle East and Asia are being targeted by a previously undocumented Chinese-speaking threat group dubbed WIP19.
The espionage-related attacks are characterized by the use of a stolen digital certificate issued by a Korean company called DEEPSoft to sign malicious artifacts deployed during the infection chain to evade detection.
“Almost all
Related Post
- November 14, 2024
Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting
Multiple threat actors have been found taking advantage of an attack technique called Sitting Ducks to hijack legitimate domains for
- November 14, 2024
Google Warns of Rising Cloaking Scams, AI-Driven Fraud,
Google has revealed that bad actors are leveraging techniques like landing page cloaking to conduct scams by impersonating legitimate sites.
- November 14, 2024
5 BCDR Oversights That Leave You Exposed to
Ransomware isn’t just a buzzword; it’s one of the most dreaded challenges businesses face in this increasingly digitized world. Ransomware
- November 14, 2024
IT specialist Jack Teixeira jailed for 15 years
Jack Teixeira, the 22-year-old former Air National Guardsman who leaked hundreds of classified documents online, has been sentenced to 15