Hacker Groups & Activities

By modifying startup configuration templates, the espionage group managed to grant passwordless root privileges to service accounts on compromised network appliances. This highly sophisticated technique was attributed to a group known as Armory Castle, a suspected state-sponsored actor from the

Malik Haidar has spent years in the trenches of global cybersecurity, steering multinational giants through the murky waters of state-sponsored espionage. As an expert in threat intelligence and business-centric security, he brings a unique perspective on how technical flaws translate into

The redirection of malicious domains following legal action represents a major blow to the infrastructure supporting the distribution of global phishing content. This massive operation, spearheaded by Chinese-speaking actors, has deployed an expansive network of approximately 17,000 unique internet

Attackers using the Iron Man System and Haozi phishing kits sent high volumes of SMS and email lures regarding traffic fines to steal sensitive financial information. This sophisticated campaign was the hallmark of the Yam Store, a notorious phishing-as-a-service network tracked by researchers as

Malik Haidar has spent years in the trenches of corporate defense, bridging the gap between high-level business risk and the granular details of cyber espionage. As an expert who has seen the inner workings of multinational security operations, he offers a unique vantage point on the shifting tides

The deployment of PEERSTITCH malware relied on a path traversal vulnerability in the FortiOS system-auto-script feature to achieve root-level access on target firewalls. This sophisticated operation, identified under the tracking designation CL-STA-0954, marks a significant evolution in the