Security researchers at Arctic Wolf Labs have discovered a sophisticated cyberattack campaign targeting the Turkish defense industry.

The infamous Trojan from 2019 is once again making headlines. Security researchers from ESET have discovered that AsyncRAT is now even more dangerous and has spread much more widely thanks to new variants.

What began as a ploy by commercial cybercriminals is now becoming a method used by state-supported hacker groups: The ClickFix technique. Originally used by financially motivated attackers to circumvent security mechanisms, it is now being used specifically by actors from North Korea, Iran and Russia for espionage purposes.

After a long period of dormancy, the Chinese hacker group FamousSparrow is active again. According to the IT security company ESET, the group has become increasingly dangerous and has deployed new, sophisticated espionage tools.

Following an intensive investigation dating back to mid-2024, the security company Mandiant has uncovered a covert espionage campaign by the China-linked group UNC3886. Specially developed malware was discovered on decommissioned Junos OS routers from Juniper Networks.

The notorious advanced persistent threat (APT) group SideWinder has refined its attack tactics and significantly expanded its geographical reach. According to recent analyses by Kaspersky, the group is now specifically targeting nuclear power plants and energy facilities.