Aggregator

Cybersecurity researchers have uncovered a sophisticated malware campaign where threat actors are exploiting Hangul Word Processor (.hwp) documents to distribute the notorious RokRAT malware. This marks a significant shift from the malware’s traditional distribution method through malicious shortcut (LNK) files, demonstrating the evolving tactics of advanced persistent threat groups. The attack campaign utilizes carefully crafted […]

The post Threat Actors Weaponizing .hwp Files to Deliver RokRAT Malware appeared first on Cyber Security News.

Arctic Wolf Labs has uncovered a sophisticated cyber-espionage operation attributed to the Dropping Elephant advanced persistent threat (APT) group, also known as Patchwork or Quilted Tiger, focusing on Turkish defense contractors specializing in precision-guided missile systems. The campaign, which began active operations in July 2025, employs a five-stage execution chain initiated through spear-phishing emails containing […]

The post Elephant APT Group Exploits VLC Player and Encrypted Shellcode in Attacks on Defense Sector appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

You must login to view this content

Organizations Urged to Address Critical Security Flaws to Prevent Unauthorized Access to On-Premises SharePoint Servers.

The post On-Premises SharePoint Server “ToolShell” Backdoor – Advisory for Mitigation and Response appeared first on Sygnia.