Month: April 2021 | Securelist

This report highlights significant events related to advanced persistent threat (APT) activity observed in Q1 2021. The summaries are based on our threat intelligence research and provide a representative snapshot of what we have published and discussed in greater detail in our private APT reports.

2024
2023
2022
2021
2020
2019
2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008
2007
2006
2005
2004
2003
2002
2001

Authors Categories Tags

Reports

Lazarus targets employees of a nuclear-related organization with a bunch of malware, such as MISTPEN, LPEClient, RollMid, CookieTime and a new modular backdoor CookiePlus.

Kaspersky researchers analyze 2019, 2022 and 2024 attacks attributed to Careto APT with medium to high confidence.

The report features the most significant developments relating to APT groups in Q3 2024, including hacktivist activity, new APT tools and campaigns.

Kaspersky analyzes SideWinder APT’s recent activity: new targets in the MiddleEast and Africa, post-exploitation tools and techniques.

April 2021

APT trends report Q1 2021

Ransomware by the numbers: Reassessing the threat’s global impact

Targeted Malware Reverse Engineering Workshop follow-up. Part 2

Targeted Malware Reverse Engineering Workshop follow-up. Part 1

Zero-day vulnerability in Desktop Window Manager (CVE-2021-28310) used in the wild

Malicious code in APKPure app

The leap of a Cycldek-related threat actor

Browser lockers: extortion disguised as a fine

Keyloggers: How they work and how to detect them (Part 1)

Scammers’ delivery service: exclusively dangerous

RansomEXX Trojan attacks Linux systems

Subscribe

Reports

Lazarus group evolves its infection chain with old and new malware

Careto is back: what’s new after 10 years of silence?

APT trends report Q3 2024

Beyond the Surface: the evolution and expansion of the SideWinder APT group

Subscribe to our weekly e-mails