DataCenterNews Asia Pacific - Specialist news for cloud & data center decision-makers
Asia

Advanced Persistent Threat (APT) Stories - Page 3

Asian Stories

Advanced Persistent Threat (APT) stories

Phantom Taurus: new Chinese group targets governments in Asia & Africa
Malware

Phantom Taurus: new Chinese group targets governments in Asia & Africa

Phantom Taurus, a new Chinese state-backed group, targets governments and telecoms in Africa, the Middle East, and Asia with advanced espionage tools and tactics.

By Shannon Williams • 5 min read • Thu, 2nd Oct 2025
Singapore CISOs face rising cyber risks, insider threats & AI worry
Data Protection

Singapore CISOs face rising cyber risks, insider threats & AI worry

Singapore CISOs face rising cyber risks with 91% reporting data loss, growing insider threats, and concerns over AI amid escalating pressure and preparedness gaps.

By Melvin Hipolito • 5 min read • Thu, 28th Aug 2025

Global Stories

Advanced Persistent Threat (APT) stories

Espionage Without Noise: Understanding APT36's Enduring Campaigns
Surveillance

Espionage Without Noise: Understanding APT36's Enduring Campaigns

Indian defence faces a decade-long silent siege as APT36 refines cross-platform cyber espionage with stealthy, persistent RAT campaigns.

By Dr Aditya Sood • 5 min read • Wed, 11th Feb 2026
CrowdStrike splits LABYRINTH CHOLLIMA into three units
Malware

CrowdStrike splits LABYRINTH CHOLLIMA into three units

CrowdStrike has split North Korea-linked LABYRINTH CHOLLIMA into three units, two for crypto theft and one for industrial espionage.

By Joseph Gabriel Lagonsin • 5 min read • Fri, 30th Jan 2026
LOTUSLITE backdoor targets US policy bodies with lures
Phishing

LOTUSLITE backdoor targets US policy bodies with lures

Politically themed LOTUSLITE phishing campaign hits US policy bodies, using DLL sideloading and espionage-focused backdoor tactics.

By Kaleah Salmon • 3 min read • Thu, 22nd Jan 2026
LinkedIn DMs abused to spread Python-based malware
Firewalls

LinkedIn DMs abused to spread Python-based malware

Attackers are abusing LinkedIn private messages to deliver Python-based malware via booby-trapped archives, ReliaQuest has warned.

By Catherine Knowles • 4 min read • Wed, 21st Jan 2026
Silver Fox APT & PowerG flaws expose key security risks
Unified Communications

Silver Fox APT & PowerG flaws expose key security risks

NCC Group links Silver Fox's false-flag malware campaigns to ValleyRAT and uncovers critical PowerG flaws that can fully compromise alarms.

By Joseph Gabriel Lagonsin • 4 min read • Tue, 13th Jan 2026
US cyber attack on Venezuela exposes CNI vulnerabilities
Surveillance

US cyber attack on Venezuela exposes CNI vulnerabilities

Alleged US cyber role in Venezuela attack exposes how multi-domain operations can silently compromise critical national infrastructure.

By Sean Mitchell • 5 min read • Thu, 8th Jan 2026
Storm-0249 hijacks security tools to fuel ransomware
Malware

Storm-0249 hijacks security tools to fuel ransomware

Storm-0249 hijacks trusted security and Windows tools to stealthily broker high-value network access for ransomware operators.

By Karen Joy Bacudo • 5 min read • Wed, 7th Jan 2026
Chinese hackers fake Teams downloads in false flag ploy
Malware

Chinese hackers fake Teams downloads in false flag ploy

Chinese state-backed hackers mimic Microsoft Teams downloads in a false flag campaign to infect Chinese speakers and blame Russian actors.

By Kaleah Salmon • 5 min read • Thu, 18th Dec 2025
CrowdStrike hits 100% in latest MITRE ATT&CK tests
Firewalls

CrowdStrike hits 100% in latest MITRE ATT&CK tests

CrowdStrike's Falcon platform scores 100% detection and protection with zero false positives in MITRE ATT&CK's toughest cloud-era tests.

By Sean Mitchell • 4 min read • Thu, 11th Dec 2025
WARP PANDA cyberespionage group targets US cloud networks
Firewalls

WARP PANDA cyberespionage group targets US cloud networks

China-linked WARP PANDA cyberespionage group targets US cloud networks, exploiting vulnerabilities in Microsoft 365, VMware, and more for sustained data access.

By Melvin Hipolito • 4 min read • Fri, 5th Dec 2025
ThreatBook unveils ATI for APAC cyber risk detection & insight
Malware

ThreatBook unveils ATI for APAC cyber risk detection & insight

ThreatBook launches its Advanced Threat Intelligence solution to enhance cyber risk detection in Asia Pacific, analysing billions of attack records daily.

By Catherine Knowles • 4 min read • Thu, 2nd Oct 2025
Broadcom patches VMware zero-day exploited for nearly a year
Cloud Security

Broadcom patches VMware zero-day exploited for nearly a year

Broadcom patches a VMware zero-day flaw exploited for nearly a year, allowing attackers root access to virtual machines in certain configurations.

By Kaleah Salmon • 4 min read • Thu, 2nd Oct 2025
WatchGuard launches FireCloud Total Access for Zero Trust SASE
Firewalls

WatchGuard launches FireCloud Total Access for Zero Trust SASE

WatchGuard launches FireCloud Total Access, a hybrid SASE service offering Zero Trust security for MSPs and IT teams to protect remote and hybrid workforces.

By Sean Mitchell • 5 min read • Fri, 26th Sep 2025
Chinese cyber group targets US policy bodies during trade talks
Phishing

Chinese cyber group targets US policy bodies during trade talks

A Chinese cyber group has targeted US government and policy organisations with spearphishing attacks amid trade talks, using advanced tactics to gain persistent access.

By Melvin Hipolito • 4 min read • Thu, 18th Sep 2025
EggStreme malware targets Philippine military in Chinese cyber campaign
Advanced Persistent Threat Protection

EggStreme malware targets Philippine military in Chinese cyber campaign

Chinese-linked EggStreme malware targets Philippine military firm, signalling rising espionage efforts in Asia-Pacific by advanced threat groups.

By Melvin Hipolito • 4 min read • Thu, 11th Sep 2025
Proofpoint warns FIDO authentication can be bypassed by downgrade
Biometrics

Proofpoint warns FIDO authentication can be bypassed by downgrade

Proofpoint warns of a potential vulnerability where FIDO authentication can be bypassed via downgrade attacks, exposing users to phishing risks despite advanced security.

By Melvin Hipolito • 4 min read • Tue, 19th Aug 2025