Remove 2023 Remove Libraries Remove Military
article thumbnail

Targeted operation against Ukraine exploited 7-year-old MS Office bug

Security Affairs

The researchers found a malicious PPSX (PowerPoint Slideshow signal-2023-12-20-160512.ppsx) ppsx) file uploaded from Ukraine to VirusTotal at the end of 2023. The payload includes a dynamic-link library (vpn.sessings) that injects the post-exploitation tool Cobalt Strike Beacon into memory and awaits commands from the C2 server.

Military 343
article thumbnail

The Russia-linked APT29 is behind recent attacks targeting NATO and EU

Security Affairs

Poland’s Military Counterintelligence Service and its Computer Emergency Response Team linked a recent string of attacks targeting NATO and European Union countries to the Russia-linked APT29 group (aka SVR group , Cozy Bear , Nobelium , and The Dukes ). The Military Counterintelligence Service and CERT.PL

Libraries 246
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Chinese actor ‘Unfading Sea Haze’ remained undetected for five years

Security Affairs

A previously unknown China-linked threat actor dubbed ‘Unfading Sea Haze’ has been targeting military and government entities since 2018. Bitdefender researchers discovered a previously unknown China-linked threat actor dubbed ‘Unfading Sea Haze’ that has been targeting military and government entities since 2018.

Archiving 336
article thumbnail

Russia-linked APT28 targets government Polish institutions

Security Affairs

jpg.exe , which pretends to be a photo and is used to trick the recipient into clicking on it, script.bat (hidden file), fake library WindowsCodecs.dll (hidden file). The nation-state actor exploited the zero-day flaw CVE-2023-23397 in attacks against European entities since April 2022.

article thumbnail

China-linked Alloy Taurus APT uses a Linux variant of PingPull malware

Security Affairs

On March 7, 2023, the researchers found a Linux variant of the PingPull that was uploaded to VirusTotal, it had a very low detection rate (3 out of 62) “Despite a largely benign verdict, additional analysis has determined that this sample is a Linux variant of PingPull malware. . net from late December 2022 through mid-February 2023.

article thumbnail

VulnRecap 3/4/24 – Ivanti, Ubiquiti, AppLocker Under Attack

eSecurity Planet

The problem: The FBI warns that during the dismantling of the Moobot botnet, agents detected code from other Russian attackers, including the notorious Fancy Bear (AKA: APT28 or Military Unit 26165) also responsible for the attack on the US Democratic National Committee (DNC) before the 2016 election.

IoT 118
article thumbnail

Preservica - 2022 highlights & momentum looking ahead

Preservica

2023 is sure to have more preservation initiatives, as organisations around the world look to make their long-term digital information stand the test of time against evolving technologies. Turning the page to 2023 is something we are excited about at Preservica. Their success is our success. Watch the free webinars here.