M-Backdoor

19
Jul
China-Linked CL-STA-1062 Shifts From Taiwan to Critical Infrastructure Across Southeast Asia- 249

China-Linked CL-STA-1062 Shifts From Taiwan to Critical Infrastructure Across Southeast Asia- 249

July 1, 2026 A China-linked threat group that spent years quietly attacking Taiwanese web-hosting infrastructure has, over the
3 min read
19
Jul
Turla's botnet redesign is about surviving disruption, not just evading detection- 240

Turla's botnet redesign is about surviving disruption, not just evading detection- 240

June 28, 2026 Russia's FSB-linked Turla group has rebuilt its longstanding Kazuar backdoor into something structurally different
3 min read
05
Jul
Patient by Design: FrostyNeighbor's Return and the Human Operator as Evasion Mechanism- 205

Patient by Design: FrostyNeighbor's Return and the Human Operator as Evasion Mechanism- 205

June 19, 2026 Most malware tries to avoid detection by being technically sophisticated. FrostyNeighbor avoids detection by being patient. Its
3 min read
05
Jul
Nothing to See Here: The Cyber Sabotage Framework That Preceded Stuxnet by Five Years- 202

Nothing to See Here: The Cyber Sabotage Framework That Preceded Stuxnet by Five Years- 202

June 24, 2026 The historical understanding of offensive cyber operations is being re-evaluated following the discovery of a sophisticated
5 min read
05
Jul
The Worm in the Toolchain: How TeamPCP Built a Credential Extraction Economy Inside Open Source- 201

The Worm in the Toolchain: How TeamPCP Built a Credential Extraction Economy Inside Open Source- 201

June 23, 2026 The most consequential credential theft does not happen when a user clicks a phishing link. It happens
4 min read
05
Jul
The Long Game: How China's Cyber Harvest Became a Western Intelligence Priority- 199

The Long Game: How China's Cyber Harvest Became a Western Intelligence Priority- 199

June 19, 2026 A significant shift has occurred in how Western nations characterize Chinese cyber operations, moving away from quiet
5 min read
05
Jul
The Art of Looking Innocent: Iran's Dual-Track Tradecraft Evolution- 198

The Art of Looking Innocent: Iran's Dual-Track Tradecraft Evolution- 198

June 23, 2026 Iran's most effective cyber operations in 2026 do not announce themselves. One looked like routine
4 min read
05
Jul
The Door Left Open: FamousSparrow's Three-Wave Intrusion into Azerbaijani Energy Infrastructure- 187

The Door Left Open: FamousSparrow's Three-Wave Intrusion into Azerbaijani Energy Infrastructure- 187

June 7, 2026 ProxyNotShell was publicly disclosed in October 2022. The Exchange server at the center of the FamousSparrow intrusion
3 min read
05
Jul
The Elected Leader: How Turla Rebuilt Kazuar as a Peer-to-Peer Espionage Botnet- 186

The Elected Leader: How Turla Rebuilt Kazuar as a Peer-to-Peer Espionage Botnet- 186

June 13, 2026 Turla has been running espionage operations for more than two decades. In that time, defenders have learned
3 min read
02
Jun
Chinese Advanced Cyber Espionage Across the Dutch-Taiwanese Semiconductor Axis- 170

Chinese Advanced Cyber Espionage Across the Dutch-Taiwanese Semiconductor Axis- 170

May 20,2026 The global semiconductor supply chain has become the primary geopolitical battleground of the 21st century. As Western
4 min read