Russian espionage group Midnight Blizzard has initiated a spear-phishing campaign aimed at diplomatic entities across Europe. This campaign utilizes a new malware loader known as ‘GrapeLoader’ and a new WineLoader backdoor version. The attack begins with a spoofed email looking like it is sent from a Ministry of Foreign Affairs, inviting the target to a wine-tasting event. The malware stealthily conducts reconnaissance and then facilitates WineLoader, a modular backdoor that supports espionage operations.

AI is rewriting the ransomware playbook – can businesses keep up?
AI is making ransomware threats more accessible and sophisticated, warn cybersecurity experts. Criminal gangs are using AI to launch highly targeted attacks with greater speed