Advanced Persistent Threat Archives

Tag: Advanced Persistent Threat

2021-01-06

China’s APT Groups May Be Looking to Cash In

Two campaigns have resulted in encrypted drives and ransom notes, suggesting that some China-linked nation-state advanced persistent threat groups have added financial gain as a […]

2021-01-06

Cosmic Lynx

Cosmic Lynx has been associated with more than 200 BEC campaigns targeting senior-level executives in 46 countries since July 2019. The group are different from […]

2021-01-06

UNC2452

UNC2452 compromised one of the modules in the SolarWinds Orion IT monitoring and management system.

2021-01-06

SUPERNOVA

The SUPERNOVA webshell is an anonymous code C# webshell written in .NET C# that is specifically written for usage on SolarWinds Orion servers. It is […]

2021-01-06

Sunburst (Backdoor)

Sunburst is a SolarWinds digitally-signed component of the Orion software framework that contains a backdoor that communicates via HTTP to third party servers. Sunburst has been […]

2021-01-06

Charming Kittens

Charming Kitten is an Iranian cyber espionage group that has been active since approximately 2014. They appear to focus on targeting individuals of interest to Iran […]