Malware

More Russian and Chinese hacking operations have been leveraging the new SILKLOADER malware loader that facilitates the delivery of Cobalt Strike in compromised machines through DLL side-loading techniques, according to The Hacker News.

Akamai researchers say the HinataBot botnet has been active for the first three months on 2023, but has exploited vulnerabilities from as far back as 2014.

East Asian DLP firm, customers targeted by Chinese APT operation Suspected Chinese advanced persistent threat operation Tick, also known as Stalker Panda, Bronze Butler, Stalker Taurus, and REDBALDKNIGHT, has infiltrated the internal update servers of a data-loss prevention company in East Asia to target the firm's government and military clients, according to The Hacker News.

Cado researchers find malware sample that has the same behaviors as the TeamTNT group best known for attacking AWS environments.

Nearly 3,000 schematics belonging to Elon Musk's spacecraft manufacturer SpaceX were purported to have been stolen by the LockBit ransomware operation following an attack against Texas-based contract manufacturing facility Maximum Industries, according to SecurityWeek.

Newly emergent advanced persistent threat operation Dark Pink, also known as Saaiwc, has launched new attacks with the improved KamiKakaBot malware against government and military organizations across Southeast Asia since last month, reports The Hacker News.