ESET's new SparroWocky analysis shows an espionage backdoor manipulating Windows internals and borrowing open-source components. The important clue is what a trusted-looking process is doing, not just its name.
Two South Korean organisations kept serving traffic through HAProxy while a hidden plugin stole credentials, hijacked sessions and altered pages for selected visitors.
QTFY combined more than 200 exploits, millions of automated scanning tasks and a distributed edge-device proxy network into a reusable platform for China-linked cyber operations.
US prosecutors allege Mabna Institute hackers served Iranian state clients while selling stolen research and university access through commercial sites.
