ID | Votes | Profile Description |
---|---|---|
APT27 | 4 | APT27, also known as Iron Taurus, is a threat actor group suspected to be attributed to China. Engaging in cyber operations with the primary goal of intellectual property theft, APT27 targets organizations globally, with a focus on North and South America, Europe, and the Middle East. The group's mo |
SysUpdate | 4 | SysUpdate is a malicious software variant that has been exclusively used by Budworm, also known as APT27, Emissary Panda, Bronze Union, Lucky Mouse, Iron Tiger, and Red Phoenix. In December 2020, a sample of the SysUpdate malware variant was found, with its payload being a new version of SysUpdate. |
Iron Taurus | 3 | Iron Taurus, also known as APT27, is a malware that has been linked to various cyber-espionage activities. This malicious software is designed to infiltrate systems surreptitiously through suspicious downloads, emails, or websites, and once inside, it can steal personal information, disrupt operatio |
Emissary Panda | 2 | Emissary Panda, also known as APT27, Iron Tiger, Bronze Union, Lucky Mouse, and Budworm, is a notable threat actor linked to China. This group has been engaged in the theft of intellectual property from organizations in sectors that China perceives as being of vital strategic interest. The group has |
ID | Type | Votes | Profile Description |
---|---|---|---|
gh0st RAT | Unspecified | 3 | Gh0st RAT is a notorious malware that was originally developed by the C. Rufus Security Team in China and has been widely used for cyber espionage since its code leaked in 2008. This malicious software can infiltrate systems through suspicious downloads, emails, or websites, often without the user's |
ASPXSpy | Unspecified | 2 | ASPXSpy is a type of malware, specifically a web shell, that has been used by various threat actors to exploit and damage computer systems. The earliest deployment attempts date back to 2022 when this malicious software was deployed to multiple hosted websites. It's typically installed on vulnerable |
Preview | Source Link | CreatedAt | Title |
---|---|---|---|
InfoSecurity-magazine | 3 months ago | Chinese Hackers Leveraging 'Noodle RAT' Backdoor | |
Trend Micro | 3 months ago | Noodle RAT Reviewing the New Backdoor Used by Chinese-Speaking Groups | |
BankInfoSecurity | 3 months ago | Active Chinese Cyberespionage Campaign Rifling Email Servers | |
Unit42 | 3 months ago | Operation Diplomatic Specter: An Active Chinese Cyberespionage Campaign Leverages Rare Tool Set to Target Governmental Entities in the Middle East, Africa and Asia | |
CERT-EU | 9 months ago | New JaskaGO Malware Targets Mac and Windows for Crypto, Browser Data | |
Securityaffairs | a year ago | Is Gelsemium APT behind an attack in Southeast Asian Govt? | |
Unit42 | a year ago | Cyberespionage Attacks Against Southeast Asian Government Linked to Stately Taurus, Aka Mustang Panda | |
Unit42 | a year ago | Rare Backdoors Suspected to be Tied to Gelsemium APT Found in Targeted Attack in Southeast Asian Government | |
CERT-EU | 2 years ago | Cyber Security Today, March 3, 2023 – Bootkit can compromise Windows 11, a hacked container found and more | IT World Canada News | |
CERT-EU | a year ago | Researchers Leverage ChatGPT to Expose Notorious macOS Malware | |
CERT-EU | 2 years ago | Iron Tiger updates malware to target Linux platform | |
MITRE | 2 years ago | Iron Tiger APT Updates Toolkit With Evolved SysUpdate Malware | |
MITRE | 2 years ago | Chinese Hackers Carried Out Country-Level Watering Hole Attack | |
MITRE | 2 years ago | Decoding network data from a Gh0st RAT variant | |
Trend Micro | 2 years ago | Iron Tiger’s SysUpdate Reappears, Adds Linux Targeting | |
DARKReading | 2 years ago | Linux Support Expands Cyber Spy Group's Arsenal | |
CERT-EU | 2 years ago | Хакеры Iron Tiger распространяют Linux-версию своей вредоносной программы SysUpdate | |
Checkpoint | 2 years ago | 6th March – Threat Intelligence Report - Check Point Research | |
CERT-EU | 2 years ago | 安全事件周报 2023-02-27 第9周 - 360CERT | |
Flashpoint | a year ago | No title |