Uncover the threat of Legacy Driver Vulnerability in cyberattacks. Learn how attackers exploit outdated drivers to bypass security.

A sophisticated campaign deployed malicious IIS modules on South Korean web servers, enabling traffic control and backdoor access. Suspected Chinese actor.

A sophisticated malware campaign targets Korean Internet cafés with Gh0st RAT and CoinMiner, hijacking systems for crypto mining. ASEC urges immediate action.

A newly surfaced report from Picus has shed light on Silver Fox (a.k.a. Void Arachne or The Great Thief of Valley), a sophisticated China-based advanced persistent threat (APT) group responsible f…

Chinese hacker group Silver Fox is using fake software installers to deploy Sainbox RAT and a Hidden rootkit, targeting Chinese speakers with stealthy, cost-effective spyware.

Kaspersky Labs has identified a sophisticated cyber-espionage campaign targeting financial institutions, particularly trading and brokerage firms, through the deployment of a new remote access tro…

A new SEO poisoning campaign is tricking users into downloading malware through fake websites for popular apps, deploying Gh0st RAT and Winos.

Huntress exposed a China-linked campaign using log poisoning on vulnerable phpMyAdmin to deploy a web shell and the Nezha monitoring tool for delivering Gh0st RAT to over 100 victims.

Researchers at Palo Alto Networks Unit 42 have uncovered two expansive and interconnected malware campaigns active throughout 2025, both designed to mass-distribute Gh0st RAT variants to Chinese-s…

Elastic exposed Dragon Breath APT's new RoningLoader malware. It uses PPL abuse and a signed kernel driver (ollama.sys) to disable Windows Defender and inject a modified gh0st RAT for espionage.