The hacking group known as Mysterious Elephant, primarily targeting Pakistan, has been seen using an advanced malware called Asynshell in their attacks. Purportedly using Hajj-themed lures to trick potential victims into executing a malicious file, the group has shared tactics with other threat actors such as SideWinder. The latest campaign’s access vector remains unknown but is thought to involve phishing emails.
Spies hack Wi-Fi networks in far-off land to launch attack on target next door
GruesomeLarch, an advanced persistent threat group, compromised several account passwords on a web service platform using credential-stuffing attacks. However, two-factor authentication prevented actual account breaches.
