mirror of
https://github.com/blackorbird/APT_REPORT.git
synced 2026-10-28 19:30:48 +00:00
Evolution of Composite Cyber Threats: 2025 Analysis and 2026 Key Response Strategies
The 2025 Cloudflare Radar Year in Review: The rise of AI, post-quantum, and record-breaking DDoS attacks
https://blog.cloudflare.com/radar-2025-year-in-review/
ChatGPT's rivals, Kwai's quiet rise: the top Internet services of 2025
https://blog.cloudflare.com/radar-2025-year-in-review-internet-services/
2025：
- https://www.bleepingcomputer.com/news/security/sandworm-hackers-use-data-wipers-to-disrupt-ukraines-grain-sector/
- https://www.welivesecurity.com/en/eset-research/operation-roundpress/#h2-6
- https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-141a
- https://research.checkpoint.com/2025/apt29-phishing-campaign/
- https://www.volexity.com/blog/2025/02/13/multiple-russian-threat-actors-targeting-microsoft-device-code-authentication/
- https://mp.weixin.qq.com/s/zerWPti8aO8ymhOT1lj-ig
- https://www.microsoft.com/en-us/security/blog/2025/07/31/frozen-in-transit-secret-blizzards-aitm-campaign-against-diplomats/
- https://harfanglab.io/insidethelab/uac-0057-pressure-ukraine-poland/
- https://mp.weixin.qq.com/s/N-ut-NCAPdbdidb4Ng8hdw
- https://mp.weixin.qq.com/s/CI1g4iaYxHhO925V15LvIQ
- https://mp.weixin.qq.com/s/wxRSVugKHy7x1SmANQOrAA
- https://mp.weixin.qq.com/s/ItcbKuoH0KjJjzSTG7YSrA
- https://www.fortinet.com/blog/threat-research/confucius-espionage-from-stealer-to-backdoor
- https://labs.k7computing.com/index.php/breakingdown-of-patchwork-apt/
- https://www.trellix.com/blogs/research/from-click-to-compromise-unveiling-the-sophisticated-attack-of-donot-apt-group-on-southern-european-government-entities/
- https://www.huntress.com/blog/inside-bluenoroff-web3-intrusion-analysis
- https://fieldeffect.com/blog/zoom-doom-bluenoroff-call-opens-the-door
- https://6068438.fs1.hubspotusercontent-na1.net/hubfs/6068438/saja-dprk-employment-scam-network.pdf
- https://www.microsoft.com/en-us/security/blog/2025/06/30/jasper-sleet-north-korean-remote-it-workers-evolving-tactics-to-infiltrate-organizations/
- https://www.genians.co.kr/en/blog/threat_intelligence/android?hsCtaAttrib=255186951894
- https://research.checkpoint.com/2025/iranian-educated-manticore-targets-leading-tech-academics/
- https://www.welivesecurity.com/en/eset-research/bladedfeline-whispering-dark/
- https://unit42.paloaltonetworks.com/iranian-attackers-impersonate-model-agency/
- https://mp.weixin.qq.com/s/nY2Hyg6ZsM7ViXW1lhO2Ag
- https://hunt.io/blog/track-apt34-like-infrastructure-before-it-strikes
- https://www.proofpoint.com/us/blog/threat-insight/call-it-what-you-want-threat-actor-delivers-highly-targeted-multistage-polyglot
- https://securelist.com/bellacpp-cpp-version-of-bellaciao/115087/
- https://research.checkpoint.com/2024/new-bugsleep-backdoor-deployed-in-recent-muddywater-campaigns/
- https://www.group-ib.com/blog/muddywater-infrastructure-malware/#introduction
- https://mp.weixin.qq.com/s/BHyqfnMMMAvDDX_LZVubyA
- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/tracing-blind-eagle-to-proton66/
- https://x.com/Merlax/status/1919786735648833727
- https://research.checkpoint.com/2025/blind-eagle-and-justice-for-all/#singlepost
- https://mp.weixin.qq.com/s/leEKONeK1JsAvPRF837Pow
- https://www.recordedfuture.com/research/drat-v2-updated-drat-emerges-tag140s-arsenal
- https://hunt.io/blog/apt36-clickfix-campaign-indian-ministry-of-defence
- https://www.seqrite.com/blog/goodbye-hta-hello-msi-new-ttps-and-clusters-of-an-apt-driven-by-multi-platform-attacks/
- https://blog.xlab.qianxin.com/p/9a61b251-aa91-46df-b36a-dea00c3b8add/
- https://mp.weixin.qq.com/s/88VDPssTV3LG9MHgAG5VsQ
- https://mp.weixin.qq.com/s/nyxZFXgrtm2-tBiV3-wiMg
- https://mp.weixin.qq.com/s/Cx-v95Ua8U7I77-yQFckpA
- https://mp.weixin.qq.com/s/m2G9oLHv04HJDW8mB5rDA
- https://3w.huanqiu.com/a/de583b/4MIDCq1bC5d
- https://www.cert.org.cn/publish/main/49/2025/20250117141306569102021/20250117141306569102021_.html
- https://www.cert.org.cn/publish/main/49/2025/20250117141608670773438/20250117141608670773438_.html
- https://www.cverc.org.cn/head/zhaiyao/news20250403-haerbinyadonghui.htm
- https://www.cert.org.cn/publish/main/49/2025/20251019142622914870997/20251019142622914870997_.html
- http://society.people.com.cn/n1/2025/0528/c1008-40489086.html
- http://www.china.com.cn/opinion2020/2025-06/09/content_117916848.shtml
- https://www.impriindia.com/insights/policy-update/space-security-cyber/
- https://www.mea.gov.in/press-releases.htm?dtl%2F38924%2F
- https://news.cnr.cn/native/gd/kx/20251019/t20251019_527401113.shtml
- https://www.mps.gov.cn:8080/n2254098/n4904352/c10047273/content.html
- https://mp.weixin.qq.com/s/ZtKjlaIoMVCSY-rXt2RP1Q
- https://mp.weixin.qq.com/s/nFdDdsTVGR9LD4t5NW8VHw
- https://www.china-cia.org.cn/WorkDetail/MCA-by-USIA.html
- https://mp.weixin.qq.com/s/kzdSrLdejED3MxSKtszUnA
- https://mp.weixin.qq.com/s/fm4Z9L0_b3w3A-QdqkB_7A
- https://mp.weixin.qq.com/s/1uVaMzBvt1PlmMMXEZvuzg
- https://mp.weixin.qq.com/s/AS3kRKDW63IzZCbxIb_MoA
- https://cloud.tencent.com.cn/developer/article/2564920
- https://www.toutiao.com/article/7590002044509930036/
- https://www.51cto.com/article/819037.html
- https://www.toutiao.com/article/7587234030123352617/
- https://www.c114.com.cn/satellite/2514/a1286133.html
- https://cloud.tencent.com.cn/developer/article/2577187
- https://www.br-cn.com/static/content/news/br_news/2025-1022/1430659388729757547.html
- https://thehackernews.com/2025/08/blind-eagles-five-clusters-target.html
- https://www.toutiao.com/article/7592393443097035279/
- https://resecurity.com/blog/article/paraguay-is-being-targeted-by-cybercriminals-74million-citizen-records-for-sale
- https://blog.lacnic.net/en/the-perfect-storm-the-largest-cyberattack-on-brazils-financial-system/
- https://www.crowdstrike.com/en-us/blog/2025-latam-threat-landscape-report-deep-dive/
- https://mp.weixin.qq.com/s/43unkZrYzJ4Roo-2NuREZg
- https://armedservices.house.gov/uploadedfiles/deterring_china.pdf
- https://docs.house.gov/billsthisweek/20241209/RCP_HR5009_xml%5b89%5d.pdf
- https://www.congress.gov/bill/119th-congress/senate-bill/2296/text
- https://www.congress.gov/bill/119th-congress/senate-bill/1071/text
- https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/view?gid=897725844#gid=897725844
- https://nvd.nist.gov/vuln/detail/CVE-2025-31201
- https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201
- https://www.securitylab.ru/news/557556.php
- https://www.elliptic.co/blog/iranian-crypto-exchange-nobitex-hacked-pro-israel-group
- https://www.jpost.com/israel-news/article-857969
- https://www.presstv.ir/Detail/2026/01/01/761673/Iran-cyberattacks-Sattar-Hashemi-communications-infrastructure-Behzad-Akbari-DDoS
- https://www.stepsecurity.io/blog/ctrl-tinycolor-and-40-npm-packages-compromised