Sign in Subscribe

M-RAT

15
Sep
SilkParasite and the Discipline Problem: What Happens When Chinese Espionage Actors Use AI to Get Better, Not Just Faster- 335

SilkParasite and the Discipline Problem: What Happens When Chinese Espionage Actors Use AI to Get Better, Not Just Faster- 335

September 1, 2026 There are two very different ways a state-linked hacking operation can put artificial intelligence to work,
3 min read
10
Sep

SilkParasite and the Discipline Problem: What Happens When Chinese Espionage Actors Use AI to Get Better, Not Just Faster- 335

September 1, 2026 There are two very different ways a state-linked hacking operation can put artificial intelligence to work,
2 min read
07
Sep
You Don't Have to Hack In, You Just Have to Log In: Phishing's New Engineering Problem- 315

You Don't Have to Hack In, You Just Have to Log In: Phishing's New Engineering Problem- 315

August 6, 2026 For twenty years, phishing's basic engineering problem was getting a password. Multifactor authentication and email-
6 min read
07
Sep
Nothing Broken, Everything Exploited: Crypto Theft Spreads Across the Entire Stack- 312

Nothing Broken, Everything Exploited: Crypto Theft Spreads Across the Entire Stack- 312

August 6,2026 Four cryptocurrency-theft incidents surfacing within a two-week window share a detail worth pausing on before
7 min read
04
Sep
One Regime, Four Fronts: Inside North Korea's Parallel Cyber Enterprise- 302

One Regime, Four Fronts: Inside North Korea's Parallel Cyber Enterprise- 302

August 8, 2026 It would be easier to track North Korea's state-linked cyber activity if it all
8 min read
27
Aug
The Long Wire: How Beijing Builds Access That Outlasts Its Cover Stories- 297

The Long Wire: How Beijing Builds Access That Outlasts Its Cover Stories- 297

August 12, 2026 Four episodes surfaced within days of each other in August 2026, and none of them, on its
5 min read
27
Aug
Borrowed Trust: How Moscow Turns Everyday Software Into an Access Network- 296

Borrowed Trust: How Moscow Turns Everyday Software Into an Access Network- 296

August 5, 2026 A fake job offer, a hijacked hotel Wi-Fi login, a criminal marketplace listing, and an advertising
6 min read
03
Aug
When cybercrime borrows a spy's toolkit: the UAT-11795 campaign hiding inside everyday software- 292

When cybercrime borrows a spy's toolkit: the UAT-11795 campaign hiding inside everyday software- 292

July 18, 2026 A financially motivated, Russian-speaking hacking crew has spent over a year quietly trojanizing the installers of
5 min read
03
Aug
Tax season as an attack surface: how a suspected Chinese hacking cluster is running parallel RAT campaigns across India, Japan, and China- 283

Tax season as an attack surface: how a suspected Chinese hacking cluster is running parallel RAT campaigns across India, Japan, and China- 283

July 7, 2026 A suspected China-nexus threat cluster has spent the current Indian tax filing season running a precisely-
3 min read
20
Jul
The Certificate Authority's Blind Spot: How a Trusted Signing Chain Became a Weapon- 255

The Certificate Authority's Blind Spot: How a Trusted Signing Chain Became a Weapon- 255

July 18, 2026 In April 2026, a routine support interaction at DigiCert — a customer service chat, a screenshot-disguised ZIP
2 min read