Tag: pyplunderplug

2 Attack Reports | 0 Vulnerabilities

Attack reports

Targets Tajikistan: New Macro Word Documents Phishing Tactics

From January to February 2025, a phishing campaign targeting Tajikistan was detected and attributed to TAG-110, a Russia-aligned threat actor. The campaign used Tajikistan government-themed documents as lures, shifting from previous tactics to macro-enabled Word template files for initial payload d…
espionage
phishing
government
cherryspy
hatvibe
pyplunderplug
logpie
2025-05-22
russia-aligned
tajikistan
Published: May 22, 2025
Downloadable IOCs: 6

Cyber Espionage Operation Expanding from Central Asia

An active cyber-espionage campaign by UAC-0063 is targeting organizations in Central Asia and Europe, including government entities and diplomatic missions. The group exploits previously compromised victims by weaponizing exfiltrated documents to deliver HATVIBE malware. They use sophisticated tool…
government targets
cyber-espionage
central asia
hatvibe
2025-01-29
downexpyer
weaponized documents
pyplunderplug
logpie
Published: January 29, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports