ciso guide
APT28: Russia’s Persistent Cyber Espionage Arm
APT28 (Fancy Bear, Sofacy, Sednit) is attributed by the US, UK and EU to Russia's GRU unit 26165. Aliases, targets, operations and defences.
Read Article →Tag · 119 Articles
ciso guide. Tagged Articles.
Articles
Page 3 of 12
ciso guide
Scattered Spider: An Emerging Cybercriminal Collective
Scattered Spider profile: aliases such as Octo Tempest and Muddled Libra, social engineering, SIM swapping and ransomware against airlines and retail.
Read Article →
ciso guide
The Economic Dynamics of Data Trade in the Dark Web: Strategic Insights for SOC Analysts and Incident Response Leads
Explore the 2025 dark web data trade, pricing of stolen data, Malware-as-a-Service models, and how dark web monitoring disrupts cybercrime markets.
Read Article →
ciso guide
APT33/Peach Sandstorm: Threat Forecast and Analysis of a Cloud-Focused Adversary
APT33 (Elfin, Peach Sandstorm) 2025 forecast: its cloud-first attack model, password spraying, Azure C2 abuse, TTPs, IoCs and defense guidance.
Read Article →
ciso guide
APT33 (Elfin / Refined Kitten): Iran’s Longstanding Cyber-Espionage Arm
APT33 (Elfin, Peach Sandstorm, HOLMIUM) is a suspected Iranian espionage group active since 2013, per MITRE ATT&CK. Targets, malware and defences.
Read Article →
ciso guide
Hazy Tiger: An Emerging Espionage Threat in South Asia
Hazy Tiger (Bitter, TA397) is a suspected South Asian espionage group. See who it targets, how spear-phishing gets it in, and how defenders can respond.
Read Article →
ciso guide
RAZOR TIGER: The Persistent South Asian Espionage Threat
RAZOR TIGER, also known as SideWinder, is a cyber espionage group active since 2012. See its aliases, targets, tactics and recent activity in South Asia.
Read Article →
ciso guide
UNC4841 / SLIME57: China-Linked Espionage Threat Expanding Global Operations
UNC4841, also identified as SLIME57, is a China-linked APT that targets government, defense and technology. See its tactics, operations and defenses.
Read Article →
ciso guide
Ghostwriter: Hybrid Influence and Espionage Operations in Eastern Europe
Ghostwriter (UNC1151, TA445, UAC-0057) profile: a Belarus-aligned group active since 2016 mixing disinformation, credential theft and espionage.
Read Article →
ciso guide
GhostEmperor: Advanced China-Linked Espionage Campaigns
GhostEmperor is a China-linked APT known for the Demodex rootkit. See its tactics, tools, yearly timeline and how to defend against its espionage.
Read Article →Brandefense