Cyber Espionage Group Archives

Over 70 Organizations Across Multiple Sectors Targeted by China-Linked Cyber Espionage Group

10Jun

By RBNo Comments

News

Over 70 Organizations Across Multiple Sectors Targeted by China-Linked Cyber Espionage Group

The reconnaissance operation against SentinelOne, an American cybersecurity company, was a component of a larger series of partially connected intrusions into multiple targets from July 2024 to March 2025. According to a report released today by SentinelOne security researchers Aleksandar Milenkoski and Tom Hegel, the victimology comprises over 70 firms from a variety of industries, a South Asian government agency, and a European media outlet. Manufacturing, government, banking, telecommunications, and research are a few of the industries that are attacked. An IT services and logistics firm that was in charge of handling hardware logistics for SentinelOne staff members at the time of the breach in early 2025 was also among the victims. Because some of the attacks are linked to a ...

University Professors Targeted by North Korean Cyber Espionage Group

Kimsuky, a threat actor associated with North Korea, has been connected to a fresh series of cyberattacks aimed at academics, researchers, and university employees in an attempt to obtain intelligence. The behavior was discovered in late July 2024, according to cybersecurity company Resilience, when it noticed an operation security (OPSEC) error committed by the hackers. Kimsuky is just one of many offensive cyber teams led by the North Korean military and administration. Other names for Kimsuky include APT43, ARCHIPELAGO, Black Banshee, Emerald Sleet, Springtail, and Velvet Chollima. Moreover, it is highly active, frequently using spear-phishing tactics as a springboard to offer an ever-expanding array of specialized tools for reconnaissance, data theft, and establishing permane...

Iranian Cyber Espionage Group Targets Financial and Government Sectors in Middle East

For at least a year, a threat actor connected to Iran's Ministry of Intelligence and Security (MOIS) has been spotted conducting a sophisticated cyber espionage campaign against the Middle East's financial, government, military, and telecommunications sectors. The actor is being tracked under the name Scarred Manticore by Israeli cybersecurity firm Check Point, which also found the campaign alongside Sygnia. This actor is believed to have a close overlap with an emerging cluster called Storm-0861, which is one of the four Iranian groups connected to damaging attacks on the Albanian government last year. The operation claimed the lives of people in Saudi Arabia, the United Arab Emirates, Jordan, Kuwait, Oman, Iraq, and Israel, among other nations. Additionally, Scarred Manticore ...