SecuriTricks - state-sponsored

Campaigns Impersonate the CIA to Target Ukraine Sympathizers, Russian Citizens and Informants

Silent Push Threat Analysts have uncovered a sophisticated phishing campaign targeting individuals sympathetic to Ukraine's defense, Russian citizens, and potential informants. The operation, believed to be orchestrated by Russian Intelligence Services, employs four major phishing clusters imperson…

phishing

impersonation

state-sponsored

russia

ukraine

russian volunteer corps

2025-04-01

hochuzhit

cia

intelligence gathering

legion liberty

Published: April 1, 2025

Downloadable IOCs: 0

China-Nexus TAG-112 Compromises Tibetan Websites to Distribute Cobalt Strike

A Chinese state-sponsored threat group, TAG-112, has compromised two Tibetan websites to deliver Cobalt Strike malware. The attackers embedded malicious JavaScript in the sites, spoofing a TLS certificate error to trick visitors into downloading a disguised security certificate. This campaign highl…

joomla vulnerabilities

tls certificate spoofing

evasive panda

tag-102

Published: November 13, 2024

Downloadable IOCs: 19

Iran-based Cyber Actors Enabling Ransomware Attacks on US Organizations

This advisory outlines the activities of an Iran-based cyber threat group that has conducted numerous intrusions against organizations in the United States and other countries since 2017, with the goal of obtaining network access to facilitate ransomware attacks. The group, known by various names s…

Published: August 28, 2024

Downloadable IOCs: 33

Tag: state-sponsored

Attack reports

Campaigns Impersonate the CIA to Target Ukraine Sympathizers, Russian Citizens and Informants

China-Nexus TAG-112 Compromises Tibetan Websites to Distribute Cobalt Strike

Iran-based Cyber Actors Enabling Ransomware Attacks on US Organizations