Cybersecurity

APT36 Suspected in PATCHCORD Espionage Campaign Using Google Sheets C2

28 sec read34 views0 listens

A new espionage campaign, dubbed PATCHCORD, targets Afghan telecom and South Asian infrastructure using fake VPN tools and Google Sheets for command and control. This sophisticated attack demonstrates advanced evasion techniques, including hijacking browser shortcuts for persistence and utilizing Google Sheets to blend malicious traffic with legitimate operations. Developers and security professionals should be aware of these evolving C2 methods and the potential for AI-assisted malware development.

Read the full article at Security Affairs

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.

You Might Like

CybersecurityJun 171m & 1 s read

Ghostwriter Hackers Abuse Gmail Admin-Themed Emails to Steal Credentials and 2FA Codes

Ghostwriter Hackers Abuse Gmail Admin-Themed Emails to Steal Credentials and 2FA Codes A sophisticated cyber threat group known as Ghostwriter has been leveraging phishing tactics that mimic official Google alerts to deceive users into divulging thei...

Ali Nemati

CybersecurityJun 531 sec read

The Good, the Bad and the Ugly in Cybersecurity - Week 23

A joint operation between U.S. agencies and private tech firms resulted in the disruption of 1.4 million social media accounts linked to transnational cryptocurrency fraud networks in Southeast Asia. This initiative demonstrates the increasing effica...

Ali Nemati

CybersecurityJun 427 sec read

Fake Claude Code Installer Via Google Sites Deliver Credential-Stealing Malware

A new campaign utilizes fake Claude Code and OpenAI Codex installation pages hosted on Google Sites to deliver credential-stealing malware via an in-memory execution technique. This attack bypasses traditional security measures by avoiding disk write...

Ali Nemati