MirrorFace, a threat actor tied to Chinese cyberespionage, has expanded its activity outside East Asia, targeting a European organization with updated hacking tools. Researchers from Eset have linked the group with the previously retired Anel backdoor, used to conduct cyberespionage, leading to its reclassification as a subgroup of APT10. The attack involved the deployment of a spear phishing email and manipulation of Visual Studio Code’s remote tunnels.
LockBit ransomware group falls victim to hackers itself
A data leak has disclosed information about negotiations with victims, Bitcoin wallet addresses, affiliate accounts, and details of attacks.
