Tag · 198 Articles

drps. Tagged Articles.

Articles

Page 4 of 20

UNC4841 APT Card summarizing China-linked cyber-espionage activity since 2021.

drps

UNC4841 / SLIME57: China-Linked Espionage Threat Expanding Global Operations

UNC4841, also identified as SLIME57, is a China-linked APT that targets government, defense and technology. See its tactics, operations and defenses.

Nov 4, 2025Read Article →

Hooded cyber operator using a typewriter, symbolizing Ghostwriter APT's hybrid disinformation and espionage tactics.

drps

Ghostwriter: Hybrid Influence and Espionage Operations in Eastern Europe

Ghostwriter (UNC1151, TA445, UAC-0057) profile: a Belarus-aligned group active since 2016 mixing disinformation, credential theft and espionage.

Oct 29, 2025Read Article →

Illustration of GhostEmperor APT with a hooded figure wearing a digital crown symbolizing cyber espionage and stealth operations.

drps

GhostEmperor: Advanced China-Linked Espionage Campaigns

GhostEmperor is a China-linked APT known for the Demodex rootkit. See its tactics, tools, yearly timeline and how to defend against its espionage.

Oct 28, 2025Read Article →

Illustration of Earth Estries, a China-linked APT group conducting global cyber-espionage campaigns.

drps

Earth Estries – Threat Actor Sheet

Earth Estries profile: a China-linked espionage group active through 2025, with tactics, operations and targets across government and research.

Oct 27, 2025Read Article →

Cybersecurity analysts monitoring APT32 attacks targeting NGOs across global threat maps in 2025.

drps

APT32 Targeting NGOs: A Perspective

APT32 (OceanLotus) analysis: a multi-year intrusion against a Vietnamese human-rights group and a backdoored Cobalt Strike plugin aimed at security staff.

Oct 26, 2025Read Article →

Hacker silhouettes analyzing digital data in a futuristic cityscape at night.

drps

Telegram Leaks and Dark Channels: How Criminals Use Telegram

What are Telegram leaks and dark Telegram channels? How criminals share stolen data through channels and bots, what monitored groups show, and what to do.

Oct 25, 2025Read Article →

Hacker group analyzing cybersecurity threats in a digital environment.

drps

Top 10 Most Significant Data Breaches Publicly Listed on the Dark Web, 2023 to 2025

Ten major data breaches listed on the dark web from 2023 to 2025, from Snowflake and MOVEit to Qantas, and the lesson each one teaches defenders.

Oct 24, 2025Read Article →

A cybercriminal using a laptop with red code reflected on the wall, symbolizing leaked credentials and ransomware activity

drps

Leaked Credentials from Ransomware Groups: Case Insights

How leaked credentials from infostealer logs, breach dumps and combolists feed ransomware, with case insights on Telegram channels and access brokers.

Oct 21, 2025Read Article →