Tag: tactics
-
Unit 42: Bookworm to Stately Taurus Using the Unit 42 Attribution Framework
Source URL: https://unit42.paloaltonetworks.com/bookworm-to-stately-taurus/ Source: Unit 42 Title: Bookworm to Stately Taurus Using the Unit 42 Attribution Framework Feedly Summary: We connect Bookworm malware to Chinese APT Stately Taurus using our attribution framework, enhancing our understanding of threat group tradecraft. The post Bookworm to Stately Taurus Using the Unit 42 Attribution Framework appeared first on Unit…
-
Microsoft Security Blog: AI vs. AI: Detecting an AI-obfuscated phishing campaign
Source URL: https://www.microsoft.com/en-us/security/blog/2025/09/24/ai-vs-ai-detecting-an-ai-obfuscated-phishing-campaign/ Source: Microsoft Security Blog Title: AI vs. AI: Detecting an AI-obfuscated phishing campaign Feedly Summary: Microsoft Threat Intelligence recently detected and blocked a credential phishing campaign that likely used AI-generated code to obfuscate its payload and evade traditional defenses, demonstrating a broader trend of attackers leveraging AI to increase the effectiveness of…
-
The Register: Nearly half of businesses suffered deepfaked phone calls against staff
Source URL: https://www.theregister.com/2025/09/23/gartner_ai_attack/ Source: The Register Title: Nearly half of businesses suffered deepfaked phone calls against staff Feedly Summary: AI attacks on the rise A survey of cybersecurity bosses has shown that 62 percent reported attacks on their staff using AI over the last year, either by the use of prompt injection attacks or faking…
-
The Register: Kaspersky: RevengeHotels checks back in with AI-coded malware
Source URL: https://www.theregister.com/2025/09/23/kaspersky_revengehotels_checks_back_in/ Source: The Register Title: Kaspersky: RevengeHotels checks back in with AI-coded malware Feedly Summary: Old hotel scam gets an AI facelift, leaving travellers’ card details even more at risk Kaspersky has raised the alarm over the resurgence of hotel-hacking outfit “RevengeHotels," which it claims is now using artificial intelligence to supercharge its…
-
The Register: Suspected Iran-backed attackers targeting European aerospace sector with novel malware
Source URL: https://www.theregister.com/2025/09/23/iran_targeting_european_aerospace/ Source: The Register Title: Suspected Iran-backed attackers targeting European aerospace sector with novel malware Feedly Summary: Instead of job offers, victims get MiniJunk backdoor and MiniBrowse stealer Suspected Iranian government-backed online attackers have expanded their European cyber ops with fake job portals and new malware targeting organizations in the defense, manufacturing, telecommunications,…