NewsPenguin Targets Pakistan with Sophisticated Espionage Tool
The NewsPenguin threat actor targeted Pakistani manufacturing, government, and military sectors with a spear-phishing attachment that pretended to be an exhibitor manual for PIMEC-23.
The document utilized remote template injection and malicious Visual Basic for Applications (VBA) macro code to carry out the infection process.
The final payload was an undocumented espionage tool that bypassed sandboxes and exfiltrated data from the infected system.
Featured Resources
View More Resources
Credit Union Boosts Threat Prevention & Detection with Cymulate
Learn how a credit union automated live-data exercises to validate exposure, improve threat readiness, and streamline SecOps.
Validating Cloud Threat Detection with Wiz Defend and Cymulate
Cymulate-Wiz integration enables proven cloud threat detection by simulating real attacks and verifying Wiz Defend.
Kerberos Authentication Relay Via CNAME Abuse
A breakdown of Kerberos authentication relay using CNAME abuse and mitigation considerations.