cyber resilience
GhostEmperor: Advanced China-Linked Espionage Campaigns
GhostEmperor is a China-linked APT known for the Demodex rootkit. See its tactics, tools, yearly timeline and how to defend against its espionage.
Read Article →Tag · 127 Articles
cyber resilience. Tagged Articles.
Articles
Page 4 of 13
cyber resilience
Earth Estries – Threat Actor Sheet
Earth Estries profile: a China-linked espionage group active through 2025, with tactics, operations and targets across government and research.
Read Article →
cyber resilience
APT32 Targeting NGOs: A Perspective
APT32 (OceanLotus) analysis: a multi-year intrusion against a Vietnamese human-rights group and a backdoored Cobalt Strike plugin aimed at security staff.
Read Article →
cyber resilience
Telegram Leaks and Dark Channels: How Criminals Use Telegram
What are Telegram leaks and dark Telegram channels? How criminals share stolen data through channels and bots, what monitored groups show, and what to do.
Read Article →
cyber resilience
Top 10 Most Significant Data Breaches Publicly Listed on the Dark Web, 2023 to 2025
Ten major data breaches listed on the dark web from 2023 to 2025, from Snowflake and MOVEit to Qantas, and the lesson each one teaches defenders.
Read Article →
cyber resilience
Leaked Credentials from Ransomware Groups: Case Insights
How leaked credentials from infostealer logs, breach dumps and combolists feed ransomware, with case insights on Telegram channels and access brokers.
Read Article →
cyber resilience
APT Groups in the MENA Region: Key Threat Actors in Cyber Espionage
Overview of APT groups active in the Middle East and North Africa, including MuddyWater, OilRig and SideWinder, their espionage aims and targets.
Read Article →
cyber resilience
The Lazarus Group: Espionage, Sabotage, and Cybercrime Under One Umbrella
Lazarus Group profile: active since at least 2009, with aliases and major incidents such as Sony Pictures, WannaCry and Bybit, plus defense guidance.
Read Article →
cyber resilience
EASM Best Practices for the Energy Sector
Learn how energy organizations can strengthen cybersecurity with EASM best practices against APTs, ransomware, and AI-powered threats.
Read Article →
cyber resilience
Larva208: A Hybrid Threat Actor to Watch
Larva208 is described as a hybrid threat actor blending ransomware, espionage and cybercrime in 2025. Sources differ on its Russia link and start date.
Read Article →Brandefense