ThreatVectr
Tag

#espionage

35 stories taggedespionage · page 2 of 3.

A computer screen displaying lines of code and network diagrams in the dark, with cascading error messages and system alerts visible, suggesting automated intru
Threat Intelligence

AI Agents Ran a Four-Day Hacking Campaign Against Taiwan's Government Systems

Researchers say a cluster of AI programs worked in near-total automation to steal credentials, map government networks, and probe a nuclear safety agency, a sign that organised hacking is getting cheaper and faster.

4 min read
Split-screen digital representation showing cryptocurrency exchange data on one side and government email infrastructure on the other, both displaying intrusion
Threat Intelligence

Meet Jewelbug: The Chinese Hacker-for-Hire Group Stealing Crypto and Spying on Governments at the Same Time

A single criminal outfit runs a massive cryptocurrency scam network with one hand and breaks into Middle Eastern government email systems with the other. Researchers say the group almost certainly works for China.

4 min read
A server room with rows of industrial-grade computer hardware, circuit boards glowing softly in the darkness, network cables running precisely along cable trays
Threat Intelligence

Kimsuky Goes Offline: North Korean Spies Build Their Own Private AI Toolkit

South Korean researchers say the Kimsuky group has stopped relying on public chatbots and is now running AI on its own servers to sharpen phishing and speed up malware writing.

4 min read
A nighttime cityscape of Central Asian architecture with surveillance camera feeds displayed as overlaid windows, digital map markers indicating targeted locati
Threat Intelligence

Chinese-Speaking Hackers Hit Central Asian Governments With Two New Malware Families

Researchers link a spying campaign against Afghanistan, Kyrgyzstan and four neighbouring states to a Chinese-speaking crew using tools tracked as OctLurk and SilkLurk.

4 min read
A cybersecurity threat operations workspace showing a campaign tracking board with malware command-and-control nodes, victim machines marked on a Middle East an
Threat Intelligence

Iran-Linked Hackers Deploy 'NightLedger' Backdoor Against Middle East, Africa Targets

Nimbus Manticore is running a fresh campaign with a new Windows backdoor and hidden tunnels that turn victim machines into relays.

3 min read
A government building at night with digital surveillance tools and malware signatures floating in the darkness, with Telegram messaging interface visible in the
Threat Intelligence

China-Linked Hackers Hit Middle East Governments With New Malware That Hides in Telegram

Zscaler researchers say a group tied to East Asia is running fresh spy operations against government networks, using three never-before-seen tools.

3 min read
Composite security threat scene: industrial network switches with flashing indicators, Zimbra email server interface, and Stadler Rail locomotive imagery all vi
Vulnerabilities

Three Security Stories You May Have Missed: Industrial Switches, Russian Email Spying, and a Rail Ransomware Shakedown

Flaws in Siemens industrial network hardware, a Russian espionage campaign targeting Zimbra webmail servers, and a ransomware extortion attempt against Swiss train maker Stadler Rail.

3 min read
A server room with rows of cloud infrastructure equipment, one unit's indicator lights glowing with exposed data streaming outward, maps of Asia and Latin Ameri
Threat Intelligence

Leaky Alibaba Cloud Server Exposes China-Linked Spying Kit Aimed at Hospitals and Governments

Researchers at Group-IB stumbled on a misconfigured server in Singapore that revealed a new Windows loader, TriBack, used against targets across Asia and Latin America.

4 min read
Full-frame photoreal news-editorial image of a dimly lit office desk at night, a laptop screen glowing with a blurred calendar grid showing dates far in the fut
Threat Intelligence

HollowGraph Spies Hide Their Orders in Fake Calendar Events Dated 2050

A newly named espionage tool turns Microsoft 365 calendars into a secret mailbox, tucking instructions and stolen files into meetings set decades in the future.

3 min read
Photoreal editorial image, 16:9, full-frame edge to edge
Threat Intelligence

Russian spies are hijacking Europe's security cameras to watch weapons move to Ukraine

Dutch intelligence says a Kremlin unit is quietly logging into internet-connected CCTV to track military convoys, aid shipments and troop positions.

3 min read
Photoreal editorial shot of a dimly lit server room in a Russian government building, rows of network equipment with faint green status lights, a single monitor
Threat Intelligence

Hackers hijack Russian security tool ViPNet to spy on government agencies

A campaign called HelloNet has been slipping malicious files into ViPNet updates since May, hitting Russian ministries, energy firms and transport operators.

3 min read
Full-frame photoreal editorial image of a dimly lit government office at night in Southeast Asia, empty desk with a glowing monitor showing abstract green code
Threat Intelligence

GoSerpent: A New Espionage Tool Quietly Targeting Southeast Asian Governments

Kaspersky says the previously unseen malware has been hitting government and diplomatic offices across the region since late 2025, with signs pointing to long-term spying rather than smash-and-grab theft.

3 min read
Photoreal editorial news image, 16:9, full frame edge to edge, dim server room inside a Taiwanese electronics manufacturing facility, blue and amber status ligh
Threat Intelligence

China-Linked 'Daxin' Rootkit Returns After Four Years, Found Inside Taiwan Factory

The stealthy kernel malware, last documented in 2022, showed up alongside a new backdoor called Stupig on a manufacturer's network.

3 min read
A dimly lit government office at night, rows of empty desks with old CRT and flat-screen monitors glowing faintly with generic login prompts, a single overhead
Threat Intelligence

Suspected Chinese and Indian Spies Both Targeted Pakistani Police, Researchers Say

A two-year campaign hit Balochistan Police and other law enforcement bodies, with servers holding criminal records among the compromised assets.

3 min read
Photoreal editorial shot of a laptop screen glowing in a dim office, showing a generic webmail inbox interface with one email highlighted, faint reflection of c
Vulnerabilities

Zimbra Patches Critical Webmail Flaw That Lets Booby-Trapped Emails Run Code

A stored cross-site scripting bug in Zimbra's Classic Web Client can hijack a user's session the moment a rigged email is opened.

3 min read
© 2026 Threat Vectr