Tag: hack-for-hire

2 Attack Reports | 0 Vulnerabilities

Attack reports

Hack-for-Hire Campaign Targets Journalists Across MENA Region

A hack-for-hire operation with suspected links to the Bitter threat actor targeted journalists, activists, and government officials across the Middle East and North Africa between 2023 and 2025. The campaign employed sophisticated spear-phishing attacks via LinkedIn, Apple Messages, WhatsApp, and e…
spear-phishing
oauth
hack-for-hire
journalists
mena
2026-04-09
civil-society-targeting
dracarys
prospy
regional-surveillance
tospy
Published: April 9, 2026
Linked vulnerabilities : CVE-2025-55182 (CVSS 10.0), CVE-2026-34040 (CVSS 8.8), CVE-2026-5281 (CVSS 8.8), CVE-2026-35616 (CVSS 9.8)
Downloadable IOCs: 0

Chinese Malware Delivery Websites

A cluster of over 400 domains have been registered since June 2024 to host spoofed websites delivering malware to Chinese-speaking users. The sites imitate popular applications like web browsers, VPNs, messaging apps, and crypto wallets. Identified malware includes Gh0stRAT, ValleyRAT, RemKos RAT, …
apt
credential theft
redline
gh0strat
valleyrat
lummastealer
malware delivery
2025-01-16
farfli
remote access trojans
chinese-speaking users
remkos rat
spoofed websites
hack-for-hire
Published: January 16, 2025
Downloadable IOCs: 526
Click here to see more Attack Reports