FortiGuard Labs links BITTER to cyberespionage attacks on South Asian organizations using malicious Windows shortcuts, PowerShell scripts, and PapRAT malware. Weiterlesen: BITTER APT Using Fake Diplomatic Documents to Deliver PapRAT Spyware
Intelligence View
⚡ tsecurity.de Intelligence
BITTER APT Using Fake Diplomatic Documents to Deliver PapRAT Spyware
FortiGuard Labs links BITTER to cyberespionage attacks on South Asian organizations using malicious Windows shortcuts, PowerShell scripts, and PapRAT malware
Malware / Trojaner / Viren Hackread – Cybersecurity News, Data Breaches, AI and More 1 Min. Lesezeit TA0002 · T1059 Gov & Defense
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1059TA0002 · Execution
Command and Scripting Interpreter
Mitigation: M1038 Execution Prevention & Script Block Logging
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 82%
Wymuszanie logowania procesów i skryptów (Sysmon / auditd), blokowanie wykonywania niegodnych zaufania skryptów.
Execution
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest - bezpłatnie Codziennie najważniejsze wiadomości bezpieczeństwa · można pobrać w każdej chwili
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Brak recenzji czytelników
Czy ta strona była pomocna?
0
Powered by tsecurity.de
tsecurity.de Hub
Powiązany klaster opowieści i źródła (wektor AI)
10 źródeł
CVE-2026-119179 | MongoDB Node.js Driver up to 6.21.x/7.7.x Connection Management information disclosure (WID-SEC-2026-4328)
9 kolejnych źródeł
VVulDB Updatesvor 2 Std.CVE-2026-119672 | MongoDB Database Tools up to 100.20.0 mongofiles privileges management (WID-SEC-2026-4328) VVulDB Updatesvor 1 Std.CVE-2026-120678 | MongoDB C Driver up to 1.30.14/2.5.7 memory leak (WID-SEC-2026-4328) VVulDB Updatesvor 1 Std.CVE-2026-120673 | MongoDB Rust Driver up to 3.9.0 Diagnostic Tracing information disclosure (WID-SEC-2026-4328) VVulDB Updatesvor 1 Std.CVE-2026-120684 | MongoDB C Driver up to 1.30.14/2.5.7 GridFS uninitialized pointer (Nessus ID 376173 / WID-SEC-2026-4328) VVulDB Updatesvor 1 Std.CVE-2026-120952 | MongoDB Atlas SQL ODBC Driver up to 3.0.0 out-of-bounds write (WID-SEC-2026-4328) VVulDB Updatesvor 1 Std.CVE-2026-120953 | MongoDB Atlas SQL JDBC Driver up to 4.0.0 Authentication redirect (WID-SEC-2026-4328)
+3
6 źródeł
CVE-2026-120757 | HDF Group HDF5 up to 2.2.x External Link Traversal src/H5Lexternal.c H5L__extern_traverse heap-based overflow (Nessus ID 376178)
5 kolejnych źródeł
VVulDB Updatesvor 3 Std.CVE-2026-120755 | HDF Group HDF5 up to 2.2.x Szip Filter src/H5Zszip.c H5Z__filter_szip out-of-bounds (Nessus ID 376175) VVulDB Updatesvor 2 Std.CVE-2026-120758 | HDF Group HDF5 up to 2.2.x Local Heap src/H5HL.c H5HL_unprotect null pointer dereference (Nessus ID 376172) VVulDB Updatesvor 5 Std.CVE-2026-120754 | HDF Group HDF5 up to 2.2.0 Scale-Offset Filter src/H5Zscaleoffset.c H5Z__filter_scaleoffset uninitialized pointer (Nessus ID 376187) VVulDB Updatesvor 5 Std.CVE-2026-19029 | HDF Group HDF5 up to 2.2.0 Scale-Offset Filter src/H5Zscaleoffset.c H5Z__filter_scaleoffset heap-based overflow (EUVD-2026-93981 / Nessus ID 376187) VVulDB Updatesvor 3 Std.CVE-2026-120756 | HDF Group HDF5 up to 2.2.x Object Header Decoding src/H5Ocache.c H5O__chunk_deserialize heap-based overflow (Nessus ID 376181)
6 źródeł
DreamHost Confirms Data Breach After Hackers Steal FTP/SFTP Credentials and Access Customer Emails
5 kolejnych źródeł
CCyber Security Newsvor 2 Std.DreamHost Confirms Cyberattack Exposing Customer FTP, SFTP and Email Passwords IIT Security Newsvor 2 Std.DigiCert Confirms Data Breach Exposing Customer Details and Sensitive Identity Documents CCyber Security Newsvor 4 Std.Hackers Breach French Bank Crédit Mutuel Arkéa Through Third-Party Provider to Steal Funds IIT Security Newsvor 4 Std.DreamHost Confirms Data Breach – Hackers Stole Customer Credentials and Accessed Emails LLatest from TechRadarvor 6 Std.Harvard University reveals data breach exposed 851,000 accounts
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/pl/4314346/tkanka/bitter-apt-using-fake-diplomatic-documents-to-deliver-paprat-spyware/