Tag: kazakhstan

2 Attack Reports | 0 Vulnerabilities

Attack reports

Bloody Wolf evolution: new targets, new tools

Bloody Wolf, a notorious threat actor, has shifted its tactics by replacing malware with the legitimate remote administration tool NetSupport. The group has expanded its targets to include organizations in both Kazakhstan and Russia, compromising over 400 systems. Their attack method involves phish…
phishing
russia
edr
netsupport
telegram
strrat
kazakhstan
2025-02-20
remote administration
jar files
Published: February 20, 2025
Downloadable IOCs: 0

Russia-nexus APT possibly related to APT28 conducts cyber espionage on Central Asia and Kazakhstan diplomatic relations

A cyber espionage campaign targeting Central Asian countries, particularly Kazakhstan's external relations, has been uncovered. The campaign, attributed to the Russia-aligned intrusion set UAC-0063, uses a sophisticated infection chain called Double-Tap to deliver the HATVIBE and CHERRYSPY malware.…
apt28
cyber espionage
2025-01-13
kazakhstan
cherryspy
diplomatic
central asia
double-tap
hatvibe
Published: January 13, 2025
Downloadable IOCs: 12
Click here to see more Attack Reports