Install
State‑Linked Operations
Campaigns tied to state actors and their cutouts.
- 1 Tracked terms
- Last 30 days Feed window
What this topic collects on
An article joins this feed when it matches these terms. Each one is also a search of its own.
Related topics
Latest in State‑Linked Operations
Partisan Zmiy Hackers Use Telegram-Controlled Vasilek Backdoor to Spy on Healthcare Networks
17+ hour, 35+ min ago (342+ words) Partisan Zmiy hackers maintained access to a healthcare organization for nearly two years, using the Telegram-controlled Vasilek backdoor alongside DNS tunnels and proxy tools. Solar 4RAYS investigators found evidence dating to early 2024 after joining the investigation in December 2025. The investigation began…...
Russia-Aligned Earth Sirrush Uses 10+ Malware Families to Spy on Ukrainian Government and Defense
18+ hour, 55+ min ago (248+ words) Russia-aligned hacking group Earth Sirrush has used more than ten malware families in sustained spying campaigns against Ukrainian government agencies, defense organizations, border guards, and logistics operators. TrendAI Research traced the activity from 2022 through July 2026, finding changing malware but consistent…...
North Korea Recruiting IT Professionals in Nigeria, Others to Plant Fake IT Staff in US Tech Companies- NBC News
3+ week, 2+ day ago (417+ words) Pyongyang, sit of power in North Korea has reportedly significantly scaled up its ongoing campaign to embed fraudulent IT professionals within American and international technology corporations. This sophisticated operation now depends on third-party accomplices in various countries who assist North…...
China-linked hackers use fake logins to spy on US AI experts
19+ hour, 46+ min ago (277+ words) To steal information, the group used a technique known as "browser-in-the-browser" (BitB). This method creates a pop-up within the web page itself that mimics a genuine browser window, complete with the usual address bar, security padlock and an exact replica…...
Iranian hackers posed as Dubai Airports recruiters to breach Iraqi infrastructure
1+ day, 11+ hour ago (302+ words) calcalistech.com The same group also ran a credential-harvesting campaign against an Israeli entity in May and June, using war-themed lures Unit 42 tracks the activity as CL-STA-1178 and calls the Iraq operation "Blinder Tunnel," after the "Peaky Blinders" branding the…...
Hacktivist Groups to Watch | IntelBroker, Anonymous Sudan & SiegedSec (Threat Intelligence Guide)
2+ day, 13+ hour ago (1656+ words) Check if your email or company was exposed in a breach, in seconds. Talk to our team about partnering with DeXpose. Get an instant exposure summary for your domain. See the DeXpose platform live with an analyst. A hacktivist is…...
Iranian hacker accused of draining 31TB from university inboxes extradited to the US
2+ day, 16+ hour ago (618+ words) MI5 Raises Alarm Over Chinese Funding of UK Academic Research Iranian hacker accused of draining 31TB from university inboxes extradited to the US Another OpenAI Safety Expert Quits and Raises New AI Safety Concerns SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 117 ShinyHunters Suspect Detained…...
How China's TA419 Exploited Trust to Target U.S. AI Policy Leadership
3+ day, 6+ hour ago (270+ words) The breach isn’t the problem. The spread is. →Measure in 5 min. Free AssessmentFree Assessment This analysis maps confirmed threat intelligence to the full cloud kill chain to show where defensive gaps would emerge as an attack progresses. TA419 sent credential phishing…...
Chinese Hackers Impersonate Former White House Official In Attempt To Steal US AI Policy Secrets
3+ day, 9+ hour ago (259+ words) Authored by AG News Staff via American Greatness, Cybersecurity firm Proofpoint revealed Thursday that a hacking group it identifies as TA419 has been attempting to steal passwords from individuals at American and Japanese think tanks, defense contractors, universities and law firms…...
Active Exploitation Alert: China-Nexus UAT-11587 Deploys Antino Backdoor Leveraging Microsoft 365 Outlook and OneDrive for Stealthy Cyber-Espionage in Asia and Middle East
3+ day, 13+ hour ago (719+ words) Rescana Active Exploitation Alert: China-Nexus UAT-11587 Deploys Antino Backdoor Leveraging Microsoft 365 Outlook and OneDrive for Stealthy Cyber-Espionage in Asia and Middle East A newly identified China-nexus cyber-espionage campaign is leveraging a sophisticated Rust-based backdoor, Antino, to target government, defense, and…...