SecurityBrief India - Technology news for CISOs & cybersecurity decision-makers
India

Advanced Persistent Threat (APT) Stories - Page 2

Global Stories

Advanced Persistent Threat (APT) stories

LockBit 5.0 ransomware targets Windows, Linux, ESXi
Malware

LockBit 5.0 ransomware targets Windows, Linux, ESXi

New LockBit 5.0 ransomware hits Windows, Linux and ESXi in single campaigns, widening blast radius across mixed and virtualised environments.

By Catherine Knowles • 3 min read • Wed, 18th Feb 2026
Okta warns of North Korean fraud in remote tech hiring
Data Protection

Okta warns of North Korean fraud in remote tech hiring

Okta warns North Korean operatives are landing remote tech jobs with stolen and synthetic identities to fund the regime and enable cyber attacks.

By Sofiah Nichole Salivio • 5 min read • Fri, 13th Feb 2026
Hackers ditch noisy ransomware for stealthy data theft
Firewalls

Hackers ditch noisy ransomware for stealthy data theft

Hackers are abandoning noisy ransomware to quietly steal data, as a report finds 80% of top attack techniques now focus on evasion.

By Shannon Williams • 4 min read • Thu, 12th Feb 2026
Espionage Without Noise: Understanding APT36's Enduring Campaigns
Surveillance

Espionage Without Noise: Understanding APT36's Enduring Campaigns

Indian defence faces a decade-long silent siege as APT36 refines cross-platform cyber espionage with stealthy, persistent RAT campaigns.

By Dr Aditya Sood • 5 min read • Wed, 11th Feb 2026
CrowdStrike splits LABYRINTH CHOLLIMA into three units
Malware

CrowdStrike splits LABYRINTH CHOLLIMA into three units

CrowdStrike has split North Korea-linked LABYRINTH CHOLLIMA into three units, two for crypto theft and one for industrial espionage.

By Joseph Gabriel Lagonsin • 5 min read • Fri, 30th Jan 2026
LOTUSLITE backdoor targets US policy bodies with lures
Phishing

LOTUSLITE backdoor targets US policy bodies with lures

Politically themed LOTUSLITE phishing campaign hits US policy bodies, using DLL sideloading and espionage-focused backdoor tactics.

By Kaleah Salmon • 3 min read • Thu, 22nd Jan 2026
LinkedIn DMs abused to spread Python-based malware
Firewalls

LinkedIn DMs abused to spread Python-based malware

Attackers are abusing LinkedIn private messages to deliver Python-based malware via booby-trapped archives, ReliaQuest has warned.

By Catherine Knowles • 4 min read • Wed, 21st Jan 2026
Silver Fox APT & PowerG flaws expose key security risks
Unified Communications

Silver Fox APT & PowerG flaws expose key security risks

NCC Group links Silver Fox's false-flag malware campaigns to ValleyRAT and uncovers critical PowerG flaws that can fully compromise alarms.

By Joseph Gabriel Lagonsin • 4 min read • Tue, 13th Jan 2026
US cyber attack on Venezuela exposes CNI vulnerabilities
Surveillance

US cyber attack on Venezuela exposes CNI vulnerabilities

Alleged US cyber role in Venezuela attack exposes how multi-domain operations can silently compromise critical national infrastructure.

By Sean Mitchell • 5 min read • Thu, 8th Jan 2026
Storm-0249 hijacks security tools to fuel ransomware
Malware

Storm-0249 hijacks security tools to fuel ransomware

Storm-0249 hijacks trusted security and Windows tools to stealthily broker high-value network access for ransomware operators.

By Karen Joy Bacudo • 5 min read • Wed, 7th Jan 2026
Chinese hackers fake Teams downloads in false flag ploy
Malware

Chinese hackers fake Teams downloads in false flag ploy

Chinese state-backed hackers mimic Microsoft Teams downloads in a false flag campaign to infect Chinese speakers and blame Russian actors.

By Kaleah Salmon • 5 min read • Thu, 18th Dec 2025
CrowdStrike hits 100% in latest MITRE ATT&CK tests
Firewalls

CrowdStrike hits 100% in latest MITRE ATT&CK tests

CrowdStrike's Falcon platform scores 100% detection and protection with zero false positives in MITRE ATT&CK's toughest cloud-era tests.

By Sean Mitchell • 4 min read • Thu, 11th Dec 2025
WARP PANDA cyberespionage group targets US cloud networks
Firewalls

WARP PANDA cyberespionage group targets US cloud networks

China-linked WARP PANDA cyberespionage group targets US cloud networks, exploiting vulnerabilities in Microsoft 365, VMware, and more for sustained data access.

By Melvin Hipolito • 4 min read • Fri, 5th Dec 2025
ThreatBook unveils ATI for APAC cyber risk detection & insight
Malware

ThreatBook unveils ATI for APAC cyber risk detection & insight

ThreatBook launches its Advanced Threat Intelligence solution to enhance cyber risk detection in Asia Pacific, analysing billions of attack records daily.

By Catherine Knowles • 4 min read • Thu, 2nd Oct 2025
Broadcom patches VMware zero-day exploited for nearly a year
Cloud Security

Broadcom patches VMware zero-day exploited for nearly a year

Broadcom patches a VMware zero-day flaw exploited for nearly a year, allowing attackers root access to virtual machines in certain configurations.

By Kaleah Salmon • 4 min read • Thu, 2nd Oct 2025
WatchGuard launches FireCloud Total Access for Zero Trust SASE
Firewalls

WatchGuard launches FireCloud Total Access for Zero Trust SASE

WatchGuard launches FireCloud Total Access, a hybrid SASE service offering Zero Trust security for MSPs and IT teams to protect remote and hybrid workforces.

By Sean Mitchell • 5 min read • Fri, 26th Sep 2025
Chinese cyber group targets US policy bodies during trade talks
Phishing

Chinese cyber group targets US policy bodies during trade talks

A Chinese cyber group has targeted US government and policy organisations with spearphishing attacks amid trade talks, using advanced tactics to gain persistent access.

By Melvin Hipolito • 4 min read • Thu, 18th Sep 2025

Stories from Other Regions

Advanced Persistent Threat (APT) stories

Phantom Taurus: new Chinese group targets governments in Asia & Africa
Malware

Phantom Taurus: new Chinese group targets governments in Asia & Africa

Phantom Taurus, a new Chinese state-backed group, targets governments and telecoms in Africa, the Middle East, and Asia with advanced espionage tools and tactics.

By Shannon Williams • 5 min read • Thu, 2nd Oct 2025