The latest cybersecurity news in APT & Threat Actors.
A joint advisory from agencies in eight countries details how Integrity Technology Group-linked hackers stole email and offered third parties access through a web portal.
A joint FBI and Secret Service advisory says the FortiBleed campaign, which harvested working credentials for more than 86,000 FortiGate devices, remains active and feeds ransomware gangs.
Researchers at Rostelecom subsidiary Solar say the Belarusian Cyber Partisans held access to a Russian healthcare organisation from early 2024 until December 2025, using a Telegram-controlled backdoor and taking no destructive action.
In its first espionage alert made public, MI5 said the China General Technology Research Institute exists mainly to fund research that improves MSS spying capability, and that over 100 UK-linked academics contributed.
Cisco Talos says China-nexus actor UAT-11587 used a new Rust backdoor, Antino, that hides its command traffic in Outlook and OneDrive to spy on government and policy bodies in eight Asian countries.
Attackers drained $387.5 million from Bitget's hot wallets on September 24 by abusing zero-days in third-party security appliances. The exchange suspects North Korean hackers.
Proofpoint says China-aligned group TA419 posed as prominent US AI policy figures to steal credentials and session data from think tank and university experts.
