PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Storm Cloud Unleashed: Tibetan Focus of Highly Targeted Fake Flash Campaign

volexity.com | research | #cloud | #vulnerability-research | #threat-intelligence | #apt | #spynote | #storm-cloud | #braindamage | #goslu | #plugdat | #stitch | #tibet | #volexity
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Beginning in May 2019, Volexity started tracking a new series of strategic web compromises that have been used in highly targeted attacks against Tibetan individuals and organizations by a Chinese […]
Published
Collected

Related coverage

research · volexity.com
Storm Cloud on the Horizon: GIMMICK Malware Strikes at macOS
In late 2021, Volexity discovered an intrusion in an environment monitored as part of its Network Security Monitoring service. Volexity detected a system running frp, otherwise known as fast reverse […]
research · volexity.com
OceanLotus Blossoms: Mass Digital Surveillance and Attacks Targeting ASEAN, Asian Nations, the Media, Human Rights Groups, and Civil Society
In May 2017, Volexity identified and started tracking a very sophisticated and extremely widespread mass digital surveillance and attack campaign targeting several Asian nations, the ASEAN organization, and hundreds of […]
research · volexity.com
Real News, Fake Flash: Mac OS X Users Targeted
Volexity recently identified a breach to the website of a well regarded media outlet in the country of Georgia. As part of this breach, the media organization’s website was being […]
research · volexity.com
PowerDuke: Widespread Post-Election Spear Phishing Campaigns Targeting Think Tanks and NGOs
In the wake of the 2016 United States Presidential Election, not even six hours after Donald Trump became the nation’s President-Elect, an advanced persistent threat (APT) group launched a series […]
research · volexity.com
Afghan Government Compromise: Browser Beware
Visiting a wide-ranging number of websites associated with the Government of Afghanistan may yield visitors an unwanted surprise. For the second time this year, malicious code has surfaced on, cdn.afghanistan.af, […]
research · volexity.com
Drupal Vulnerability: Mass Scans & Targeted Exploitation
Yesterday (October 15, 2014), a critical SQL injection vulnerability in version 7 of the popular open source content management system (CMS) Drupal was disclosed by Stefan Horst and detailed in […]
Back