Skip to content

Category

Intrusions

63
stories
OCT 27
latest
Malware

New PXA Stealer Campaign Hits Victims Worldwide

A group of attackers with ties to the Vietnamese cybercrime underground ecosystem are running a significant campaign across many different countries that is delivering the PXA Stealer malware and uses novel sideloading and anti-analysis techniques to slip past defensive measures.  The campaign has targeted victims in more than 60 countries and the attackers have harvested…

Dennis Fisher · 2 min
Microsoft

Microsoft Finds Secret Blizzard Targeting Foreign Diplomats

Microsoft has uncovered a long-running campaign by a threat group affiliated with Russian intelligence that has targeted diplomats working in Russia with a custom tool called ApolloShadow that enables the group to maintain persistence on victims’ devices as part of a cyberespionage operation. The group is known as Secret Blizzard and Microsoft’s researchers found that…

Dennis Fisher · 2 min
China

Chinese Attackers Target SharePoint CVE-2025-53770

Three separate Chinese threat groups are exploiting a set of recently disclosed vulnerabilities in on-premises Microsoft SharePoint installations, and Microsoft and CISA are urging companies that haven’t yet updated their installations to do so as quickly as possible.  Microsoft first published information about the two flaws (CVE-2025-53770 and CVE-2025-53771) on July 19 after seeing active…

Dennis Fisher · 1 min

Newsletter

The Decipher Brief

Every week: the stories, the episode, the clips.

Newsletter sign-up is coming soon.