Wineloader sends the victim's username, device name, process name, and other information to the C2 to help profile the system. The C2 can order the execution of modules that can be dynamically loaded ...

Russian state-sponsored espionage group Midnight Blizzard is behind a new spear-phishing campaign targeting diplomatic entities in Europe, including embassies. Midnight Blizzard, aka 'Cozy Bear' or ...

The formidable Russia-backed threat group APT29 is behind a fresh wave of phishing attacks on European diplomats that once again aims to take advantage of their cultural persuasion for enjoying wine ...

Europeans are known to enjoy fine wine, a cultural characteristic that's been used against them by attackers behind a recent threat campaign. The cyber operation aimed to deliver a novel backdoor by ...

Cyberespionage group known as APT29 and linked to Russia’s foreign intelligence service (SVR), has added a new malware loader to its toolset. Used for fingerprinting, persistence and payload delivery, ...

Researchers warn that a cyberespionage group linked to Russia’s foreign intelligence service, the SVR, has recently launched a spear-phishing campaign targeting one of Germany’s major political ...

Notorious Russian nation-state actor Midnight Blizzard is targeting European diplomats with a phishing lure inviting them to wine tasting events. The campaign has targeted multiple European countries ...