“Hazy Hawk”, a highly sophisticated hacker, has been exploiting DNS misconfigurations to hijack abandoned cloud resources over the past two years; they then use these subdomains to distribute scams and malware. This hacker’s methods require advanced technical skills, often utilising complicated obfuscation techniques to evade detection. The global scale of Hazy Hawk’s operations indicates possession of access to significant resources and advanced capabilities.

SideWinder APT Hackers Exploits Legacy Office Vulnerabilities to Deploy Malware Undetected
The Acronis Threat Research Unit has identified an extensive cyber campaign run by the SideWinder advanced persistent threat group, targeting high-value institutions in Sri Lanka,