PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

SharpTongue Deploys Clever Mail-Stealing Browser Extension “SHARPEXT”

volexity.com | research | #vulnerability-research | #threat-intelligence | #apt | #browser-extension | #north-korea | #kimsuky | #sharpext | #sharptongue | #volexity | #sharpestroke
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

# SharpTongue Deploys Clever Mail-Stealing Browser Extension “SHARPEXT” July 28, 2022 Paul Rascagneres, Tom Lancaster, and Volexity Threat Research Volexity tracks a variety of threat actors to...
Published
Collected

Related coverage

research · volexity.com
North Korean BLUELIGHT Special: InkySquid Deploys RokRAT
In a recent blog post, Volexity disclosed details on a portion of the operations by a North Korean threat actor it tracks as InkySquid. This threat actor compromised a news […]
research · volexity.com
OceanLotus Blossoms: Mass Digital Surveillance and Attacks Targeting ASEAN, Asian Nations, the Media, Human Rights Groups, and Civil Society
In May 2017, Volexity identified and started tracking a very sophisticated and extremely widespread mass digital surveillance and attack campaign targeting several Asian nations, the ASEAN organization, and hundreds of […]
research · volexity.com
Real News, Fake Flash: Mac OS X Users Targeted
Volexity recently identified a breach to the website of a well regarded media outlet in the country of Georgia. As part of this breach, the media organization’s website was being […]
research · volexity.com
PowerDuke: Widespread Post-Election Spear Phishing Campaigns Targeting Think Tanks and NGOs
In the wake of the 2016 United States Presidential Election, not even six hours after Donald Trump became the nation’s President-Elect, an advanced persistent threat (APT) group launched a series […]
research · volexity.com
Afghan Government Compromise: Browser Beware
Visiting a wide-ranging number of websites associated with the Government of Afghanistan may yield visitors an unwanted surprise. For the second time this year, malicious code has surfaced on, cdn.afghanistan.af, […]
research · volexity.com
Drupal Vulnerability: Mass Scans & Targeted Exploitation
Yesterday (October 15, 2014), a critical SQL injection vulnerability in version 7 of the popular open source content management system (CMS) Drupal was disclosed by Stefan Horst and detailed in […]
Back