Tag: cloud c2

2 Attack Reports | 0 Vulnerabilities

Attack reports

Cloud Atlas activity in the first half of 2025: what changed

The Cloud Atlas APT group continues to target countries in Eastern Europe and Central Asia using phishing emails with malicious attachments exploiting CVE-2018-0802. The infection chain now includes several implants: VBShower, VBCloud, PowerShower, and CloudAtlas. New and updated components are des…
apt
phishing
CVE-2018-0802
vbcloud
vbshower
central asia
eastern europe
cloud c2
powershower
2025-12-20
cloudatlas
Published: December 20, 2025
Downloadable IOCs: 0

Analysis of APT37 Attack Case Disguised as a Think Tank for National Security Strategy in South Korea (Operation ToyBox Story)

APT37, a North Korean state-sponsored hacking group, launched a spear phishing campaign targeting activists focused on North Korea. The attack involved emails with Dropbox links to malicious LNK files, which when executed, activated additional malware. The group utilized legitimate cloud services a…
north korea
rokrat
south korea
lnk files
spear phishing
CVE-2022-41128
national security
2025-06-06
fileless attacks
cloud c2
Published: June 6, 2025
Downloadable IOCs: 1
Click here to see more Attack Reports