HighEspionage / nation-stateActive
ESET: Turla hides new Cereal toolset on government Exchange servers to collect NATO and EU correspondence
ESET said on November 10 that it found a previously undocumented modular .
Category
ESET said on November 10 that it found a previously undocumented modular .
ESET researchers exposed a Russia-aligned threat actor they named Gorbag, active since at least February 2025 and focused exclusively on Ukrainian targets, especially law enforcement and justice entities, local administrations near the front line, the defense sector and a major transportation hub for foreign military aid .
Fortinet FortiGuard Labs published research on Nov 2 saying it has tracked, over several months, a campaign targeting South Asian organizations that uses PowerShell scripts and a custom remote access trojan it calls PapRAT for persistent access, attributing it to BITTER with high confidence .
Poland's national computer security incident response team, CERT.
On 2024-02-07, CISA, NSA, and the FBI issued a joint advisory attributing confirmed intrusions into U.
In early 2024, Microsoft published incident response guidance regarding activity by threat actor Midnight Blizzard .