drps
GALLIUM APT: What MITRE ATT&CK Says
GALLIUM is a cyberespionage group MITRE ATT&CK says has been active since at least 2012. See what MITRE confirms, what is unproven and how to defend.
Read Article →Tag · 198 Articles
drps. Tagged Articles.
Articles
Page 2 of 20
drps
React2Shell — The Day 5 Reality Check
React2Shell (CVE-2025-55182) is a critical React Server Components flaw. See how exploitation grew in the five days after disclosure and what to do.
Read Article →
drps
TraderTraitor: North Korea’s Crypto Heist Machine
TraderTraitor profile (Jade Sleet, UNC4899): North Korea-aligned, part of Lazarus, with crypto theft, trojanized developer tools and supply chain abuse.
Read Article →
drps
Handala: The Rise of a Decentralized Pro-Palestinian Hacktivist Collective
Handala Hack is a persona MITRE ATT&CK links to Iran's MOIS (VOID MANTICORE); the US DOJ and FBI acted in March 2026. Targets, tactics, defences.
Read Article →
drps
Moonlight Tiger (APT-C-09, Patchwork, Dropping Elephant): India’s Silent Espionage Arm in the Digital Battlefield
Moonlight Tiger (APT-C-09) is an India-linked cyber-espionage group targeting defense, policy, and research sectors across South and East Asia.
Read Article →
drps
Inside WageMole: North Korea’s Fusion of Cybercrime and Espionage
Discover how the North Korean WageMole APT blends cybercrime and espionage, targeting crypto, fintech, and defense with advanced social engineering.
Read Article →
drps
Inside Void Manticore: Iran’s Hybrid Hacktivist for Information Warfare
Void Manticore profile (STORM-842, Homeland Justice, Karma): hybrid hacktivism and state interests, destructive malware, data leaks and influence work.
Read Article →
drps
Sandworm (APT44): Russia’s Most Destructive Cyber Weapon
Sandworm (APT44) profile: aliases, motives, tactics, targets and notable operations, including NotPetya and the AcidPour wiper on critical infrastructure.
Read Article →
drps
APT37: North Korea’s Active Cyberespionage Group
APT37 (Reaper, Ricochet Chollima, ScarCruft) profile: active since at least 2012, with spearphishing, persistence methods and recent activity.
Read Article →
drps
APT42: Iran’s Shadow Operative in Global Cyberspace
APT42 (UNC788, CALANQUE) profile: espionage via credential phishing, surveillance malware and mobile exploits against NGOs, journalists and policymakers.
Read Article →Brandefense