NewsPenguin Targets Pakistan with Sophisticated Espionage Tool
The NewsPenguin threat actor targeted Pakistani manufacturing, government, and military sectors with a spear-phishing attachment that pretended to be an exhibitor manual for PIMEC-23.
The document utilized remote template injection and malicious Visual Basic for Applications (VBA) macro code to carry out the infection process.
The final payload was an undocumented espionage tool that bypassed sandboxes and exfiltrated data from the infected system.
Featured Resources
View More Resources
Control Validation and Optimization
Continuously validate and optimize security controls to improve prevention, detection and response effectiveness.
Cymulate Joins Anthropic Cyber Verification Program
Cymulate has joined the Anthropic Cyber Verification Program, giving Cymulate Research Labs access to advanced AI capabilities for defensive cybersecurity research. This strengthens
The Pipe That Trusted Everyone
Ilan Kalendarov, Security Research Team LeadBen Zamir, Security ResearcherElad Beber, Security Researcher How a single misconfigured named pipe let an