SecuriTricks - targeted attacks

Operation Endgame 2.0

International law enforcement agencies have taken additional actions in Operation Endgame, targeting cybercriminal organizations, particularly those behind DanaBot. DanaBot is a powerful modular malware family written in Delphi, capable of keylogging, capturing screenshots, recording desktop videos…

espionage

darkgate

Published: May 23, 2025

Downloadable IOCs: 9

New wave of targeted attacks of the Angry Likho APT on Russian organizations

The Angry Likho APT group has launched a new wave of targeted attacks primarily against Russian organizations. The group employs spear-phishing emails with malicious attachments as the initial attack vector. A previously unknown implant was discovered, utilizing a self-extracting archive and AutoIt…

Published: February 24, 2025

Downloadable IOCs: 30

Forges Recruitment Sites, Launches Attacks on Aerospace and Semiconductor Industries in Multiple Countries

In this analysis, researchers have uncovered a malicious campaign orchestrated by APT35, a threat group believed to be affiliated with the Islamic Revolutionary Guard Corps (IRGC) of Iran. The group has been observed using forged recruitment sites and corporate sites to target the aerospace and sem…

semiconductor industry

Published: December 4, 2024

Downloadable IOCs: 12

Operation Celestial Force employs mobile and desktop malware to target Indian entities

Cisco Talos is disclosing a new malware campaign called 'Operation Celestial Force' conducted by a Pakistani nexus of threat actors called 'Cosmic Leopard'. This multi-year operation has been targeting Indian entities and individuals since at least 2018, employing the use of GravityRAT (an Android …

Published: June 14, 2024

Downloadable IOCs: 142

Tag: targeted attacks

Attack reports

Operation Endgame 2.0

New wave of targeted attacks of the Angry Likho APT on Russian organizations

Forges Recruitment Sites, Launches Attacks on Aerospace and Semiconductor Industries in Multiple Countries

Operation Celestial Force employs mobile and desktop malware to target Indian entities