πNew WriteupβοΈ
βββββββββββββββ
πDate: Fri, 14 Apr 2023 21:58:33 GMT
βββββββββββββββ
βοΈTitle: Polonia e CERT Polska attribuiscono ad APT29 una campagna di spionaggio informatico
βββββββββββββββ
πLink: https://medium.com/p/9bfeb2effeb7
βββββββββββββββ
Tags: #apt29 #cybersecurity #orso_accogliente #spionaggio_informatico #sicurezza_informatica
βββββββββββββββ
πDate: Fri, 14 Apr 2023 21:58:33 GMT
βββββββββββββββ
βοΈTitle: Polonia e CERT Polska attribuiscono ad APT29 una campagna di spionaggio informatico
βββββββββββββββ
πLink: https://medium.com/p/9bfeb2effeb7
βββββββββββββββ
Tags: #apt29 #cybersecurity #orso_accogliente #spionaggio_informatico #sicurezza_informatica
Medium
Polonia e CERT Polska attribuiscono ad APT29 una campagna di spionaggio informatico
Al gruppo di hacker noto come APT29, o comunemente chiamato Orso Accogliente, Γ¨ stata attribuita a una campagna di spionaggio informaticoβ¦
πNew WriteupβοΈ
βββββββββββββββ
πDate: Thu, 04 May 2023 18:42:01 GMT
βββββββββββββββ
βοΈTitle: APT (Advanced Persistent Threat)
βββββββββββββββ
πLink: https://medium.com/p/2915dd50fa72
βββββββββββββββ
Tags: #threat #apt #cybersecurity #apt29 #threat_intelligence
βββββββββββββββ
πDate: Thu, 04 May 2023 18:42:01 GMT
βββββββββββββββ
βοΈTitle: APT (Advanced Persistent Threat)
βββββββββββββββ
πLink: https://medium.com/p/2915dd50fa72
βββββββββββββββ
Tags: #threat #apt #cybersecurity #apt29 #threat_intelligence
Medium
APT (Advanced Persistent Threat)
Organizations face a highly intricate and constantly changing security threat environment that makes their digital assets vulnerable to aβ¦
β€· Title: Anatomy of a Suspicious IP: 13.248.169.48, Typosquatting, and the APT29 Whispers
ββββββββββββββββββββββββ
πͺ Author: S3NT1N3L.io - FΓ‘bio Correia
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 07 Jan 2025 19:16:22 GMT
ββββββββββββββββββββββββ
β Tags: #typosquatting #phishing #threat_intelligence #apt29 #cybersecurity
ββββββββββββββββββββββββ
πͺ Author: S3NT1N3L.io - FΓ‘bio Correia
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 07 Jan 2025 19:16:22 GMT
ββββββββββββββββββββββββ
β Tags: #typosquatting #phishing #threat_intelligence #apt29 #cybersecurity
Medium
Anatomy of a Suspicious IP: 13.248.169.48, Typosquatting, and the APT29 Whispers
Typosquatting, threat intelligence feeds, and a single IP address at the center of it allβββhereβs a deep dive into how one AWS-hostedβ¦
β€· Title: Malware Detection with YARA
ββββββββββββββββββββββββ
πͺ Author: Iram Jack
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 19 Jan 2025 11:32:03 GMT
ββββββββββββββββββββββββ
β Tags: #yara_rules #malware_analysis #tryhackme #threat_hunting #apt29
ββββββββββββββββββββββββ
πͺ Author: Iram Jack
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 19 Jan 2025 11:32:03 GMT
ββββββββββββββββββββββββ
β Tags: #yara_rules #malware_analysis #tryhackme #threat_hunting #apt29
Medium
Malware Detection with YARA
YARA | Part 4
β€· Title: Russian Hackers Exploit Microsoft Device Code Authentication in Targeted Attacks Against M365 Accounts
ββββββββββββββββββββββββ
πͺ Author: do son
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 17 Feb 2025 02:19:14 +0000
ββββββββββββββββββββββββ
β Tags: #Cyber Security #APT29 #CozyDuke #CozyLarch #DarkHalo #Device Code Authentication #Device Code Authentication phishing #Midnight Blizzard #phishing #UTA0304 #UTA0307
ββββββββββββββββββββββββ
πͺ Author: do son
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 17 Feb 2025 02:19:14 +0000
ββββββββββββββββββββββββ
β Tags: #Cyber Security #APT29 #CozyDuke #CozyLarch #DarkHalo #Device Code Authentication #Device Code Authentication phishing #Midnight Blizzard #phishing #UTA0304 #UTA0307
Daily CyberSecurity
Russian Hackers Exploit Microsoft Device Code Authentication in Targeted Attacks Against M365 Accounts
Explore the risks of Device Code Authentication phishing targeted at Microsoft 365 users by Russian threat actors.
β€· Title: APT29 Targets European Diplomats with Wine-Themed Phishing
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 17 Apr 2025 00:26:49 +0000
ββββββββββββββββββββββββ
β Tags: #Cyber Security #Malware #APT29 #cyberattack #cybersecurity #GRAPELOADER #phishing #threat actor #WINELOADER
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Thu, 17 Apr 2025 00:26:49 +0000
ββββββββββββββββββββββββ
β Tags: #Cyber Security #Malware #APT29 #cyberattack #cybersecurity #GRAPELOADER #phishing #threat actor #WINELOADER
Daily CyberSecurity
APT29 Targets European Diplomats with Wine-Themed Phishing
APT29, a Russia-linked group, targets European diplomats with phishing emails disguised as wine tasting invitations, deploying GRAPELOADER malware
β€· Title: Cozy Bearβs Wine Lure Drops WineLoader Malware on EU Diplomats
ββββββββββββββββββββββββ
πͺ Author: Deeba Ahmed
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 19 Apr 2025 18:13:05 +0000
ββββββββββββββββββββββββ
β Tags: #Security #Cyber Attacks #Malware #Phishing Scam #APT29 #Cozy Bear #Cyber Attack #Cybersecurity #europe #GrapeLoader #Midnight Blizzard #Russia #WineLoader
ββββββββββββββββββββββββ
πͺ Author: Deeba Ahmed
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 19 Apr 2025 18:13:05 +0000
ββββββββββββββββββββββββ
β Tags: #Security #Cyber Attacks #Malware #Phishing Scam #APT29 #Cozy Bear #Cyber Attack #Cybersecurity #europe #GrapeLoader #Midnight Blizzard #Russia #WineLoader
Hackread
Cozy Bearβs Wine Lure Drops WineLoader Malware on EU Diplomats
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
β€· Title: APT29 Uncorks WINELOADER: A Sophisticated Cyber Espionage Campaign Targeting European Diplomats
ββββββββββββββββββββββββ
πͺ Author: Ismail Tasdelen
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 20 Apr 2025 07:23:48 GMT
ββββββββββββββββββββββββ
β Tags: #threat_hunting #apt29 #cyberattack #cybersecurity #threat_intelligence
ββββββββββββββββββββββββ
πͺ Author: Ismail Tasdelen
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 20 Apr 2025 07:23:48 GMT
ββββββββββββββββββββββββ
β Tags: #threat_hunting #apt29 #cyberattack #cybersecurity #threat_intelligence
Medium
π· APT29 Uncorks WINELOADER: A Sophisticated Cyber Espionage Campaign Targeting European Diplomats
In early 2024, cybersecurity researchers uncovered a meticulously crafted cyber espionage campaign targeting European diplomats. Thisβ¦
β€· Title: Russian APT UNC6293 Exploits Google Application-Specific Passwords to Hack Critics
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 20 Jun 2025 00:28:22 +0000
ββββββββββββββββββββββββ
β Tags: #Cyber Security #Application_Specific Passwords #APT29 #ASP #Cyberespionage #Google Accounts #Google Threat Intelligence #phishing #Russian APT #social engineering #state_sponsored #UNC6293
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Fri, 20 Jun 2025 00:28:22 +0000
ββββββββββββββββββββββββ
β Tags: #Cyber Security #Application_Specific Passwords #APT29 #ASP #Cyberespionage #Google Accounts #Google Threat Intelligence #phishing #Russian APT #social engineering #state_sponsored #UNC6293
Daily CyberSecurity
Russian APT UNC6293 Exploits Google Application-Specific Passwords to Hack Critics
A Russian state-sponsored APT, UNC6293 (likely APT29), is exploiting Google Application-Specific Passwords in a sophisticated phishing campaign targeting critics of Russia
β€· Title: XINTRA TechTonik Lab Walkthrough
ββββββββββββββββββββββββ
πͺ Author: QhtSec
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 19 Jul 2025 12:33:23 GMT
ββββββββββββββββββββββββ
β Tags: #cybersecurity #apt29 #dfir #xintra #threat_hunting
ββββββββββββββββββββββββ
πͺ Author: QhtSec
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 19 Jul 2025 12:33:23 GMT
ββββββββββββββββββββββββ
β Tags: #cybersecurity #apt29 #dfir #xintra #threat_hunting
Medium
XINTRA TechTonik Lab Walkthrough
SCOPING NOTE
β€· Title: MITRE ATT&CK Framework Nedir? DetaylΔ± AnlatΔ±m + GerΓ§ek Bir SaldΔ±rΔ± Senaryosu ile Γrnek
ββββββββββββββββββββββββ
πͺ Author: FatihUYSAL
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 29 Jul 2025 09:58:34 GMT
ββββββββββββββββββββββββ
β Tags: #threat_hunting #infosec #cybersecurity #apt29 #mitre_attack
ββββββββββββββββββββββββ
πͺ Author: FatihUYSAL
ββββββββββββββββββββββββ
β΄΅ Time: Tue, 29 Jul 2025 09:58:34 GMT
ββββββββββββββββββββββββ
β Tags: #threat_hunting #infosec #cybersecurity #apt29 #mitre_attack
Medium
MITRE ATT&CK Framework Nedir? DetaylΔ± AnlatΔ±m + GerΓ§ek Bir SaldΔ±rΔ± Senaryosu ile Γrnek
1. π§ MITRE ATT&CK Nedir?
β€· Title: TeamCity Exploit Lab (APT29 Exploiting TeamCity)βββCyberDefenders Lab | Walkthrough
ββββββββββββββββββββββββ
πͺ Author: Michael Angelo Padua
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 16 Aug 2025 07:46:12 GMT
ββββββββββββββββββββββββ
β Tags: #threat_hunting #cybersecurity #apt29 #ransomware #teamcity
ββββββββββββββββββββββββ
πͺ Author: Michael Angelo Padua
ββββββββββββββββββββββββ
β΄΅ Time: Sat, 16 Aug 2025 07:46:12 GMT
ββββββββββββββββββββββββ
β Tags: #threat_hunting #cybersecurity #apt29 #ransomware #teamcity
Medium
TeamCity Exploit Lab (APT29 Exploiting TeamCity)βββCyberDefenders Lab | Walkthrough
Greetings everyone and welcome to this walkthrough of the CyberDefenders lab! π
β€· Title: A Digital Watering Hole: How Russiaβs APT29 Is Abusing Microsoft Auth Flow
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 31 Aug 2025 10:01:57 +0000
ββββββββββββββββββββββββ
β Tags: #Cybercriminals #Amazon #APT29 #cyber_espionage #cybersecurity #Microsoft #Midnight Blizzard #SVR #watering hole
ββββββββββββββββββββββββ
πͺ Author: Ddos
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 31 Aug 2025 10:01:57 +0000
ββββββββββββββββββββββββ
β Tags: #Cybercriminals #Amazon #APT29 #cyber_espionage #cybersecurity #Microsoft #Midnight Blizzard #SVR #watering hole
Daily CyberSecurity
A Digital Watering Hole: How Russia's APT29 Is Abusing Microsoft Auth Flow
Amazon has disrupted a watering hole campaign by Russia's APT29. The hackers used compromised sites to trick users into authorizing attacker-controlled devices via Microsoft.
β€· Title: Amazon Disrupts Russian APT29 Watering Hole Targeting Microsoft Authentication
ββββββββββββββββββββββββ
πͺ Author: Waqas
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 01 Sep 2025 11:13:59 +0000
ββββββββββββββββββββββββ
β Tags: #Security #Cyber Attacks #Amazon #APT29 #AWS #CloudFlare #Cyber Attack #Cybersecurity #Microsoft #Midnight Blizzard #Russia
ββββββββββββββββββββββββ
πͺ Author: Waqas
ββββββββββββββββββββββββ
β΄΅ Time: Mon, 01 Sep 2025 11:13:59 +0000
ββββββββββββββββββββββββ
β Tags: #Security #Cyber Attacks #Amazon #APT29 #AWS #CloudFlare #Cyber Attack #Cybersecurity #Microsoft #Midnight Blizzard #Russia
Hackread
Amazon Disrupts Russian APT29 Watering Hole Targeting Microsoft Authentication
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
β€· Title: How Amazon Disrupted APT29βs Watering-Hole Attack
ββββββββββββββββββββββββ
πͺ Author: Deven Chhajed
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 09 Nov 2025 03:31:59 GMT
ββββββββββββββββββββββββ
β Tags: #cybersecurity #microsoft365security #apt29 #watering_hole_attack #cloud_security
ββββββββββββββββββββββββ
πͺ Author: Deven Chhajed
ββββββββββββββββββββββββ
β΄΅ Time: Sun, 09 Nov 2025 03:31:59 GMT
ββββββββββββββββββββββββ
β Tags: #cybersecurity #microsoft365security #apt29 #watering_hole_attack #cloud_security
Medium
How Amazon Disrupted APT29βs Watering-Hole Attack
Cloud platforms are supposed to be safe harbors. Microsoft 365 is where businesses keep their email, files and collaboration tools. Butβ¦