PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

OceanLotus: Extending Cyber Espionage Operations Through Fake Websites

volexity.com | research | #vulnerability-research | #threat-intelligence | #malware | #android | #phishing | #ios | #vietnam | #osx | #cobaltstrike | #oceanlotus
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Since Volexity’s 2017 discovery that OceanLotus was behind a sophisticated massive digital surveillance campaign, the threat group has continued to evolve. In 2019, Volexity gave a presentation at RSA Conference […]
Published
Collected

Related coverage

research · volexity.com
EvilBamboo Targets Mobile Devices in Multi-year Campaign
# EvilBamboo Targets Mobile Devices in Multi-year Campaign September 22, 2023 Callum Roxan, Paul Rascagneres, and Tom Lancaster Volexity has identified several long-running and currently active...
research · volexity.com
Storm Cloud on the Horizon: GIMMICK Malware Strikes at macOS
In late 2021, Volexity discovered an intrusion in an environment monitored as part of its Network Security Monitoring service. Volexity detected a system running frp, otherwise known as fast reverse […]
research · volexity.com
Sophisticated Phishing Campaign Targets Corporate Credentials
Volexity has been tracking a series of phishing campaigns focused on harvesting Microsoft Office 365 account credentials. While many commodity phishing kits are available to purchase containing Office 365 themes, […]
research · volexity.com
OceanLotus Blossoms: Mass Digital Surveillance and Attacks Targeting ASEAN, Asian Nations, the Media, Human Rights Groups, and Civil Society
In May 2017, Volexity identified and started tracking a very sophisticated and extremely widespread mass digital surveillance and attack campaign targeting several Asian nations, the ASEAN organization, and hundreds of […]
research · volexity.com
Real News, Fake Flash: Mac OS X Users Targeted
Volexity recently identified a breach to the website of a well regarded media outlet in the country of Georgia. As part of this breach, the media organization’s website was being […]
research · volexity.com
PowerDuke: Widespread Post-Election Spear Phishing Campaigns Targeting Think Tanks and NGOs
In the wake of the 2016 United States Presidential Election, not even six hours after Donald Trump became the nation’s President-Elect, an advanced persistent threat (APT) group launched a series […]
Back