Cloud Atlas activity in the first half of 2025: what changed

Known since 2014, the Cloud Atlas group targets countries in Eastern Europe and Central Asia. Infections occur via phishing emails containing a malicious document that exploits an old vulnerability in the Microsoft Office Equation Editor process CVE-2018-0802 to download and execute malicious cod...

INE Security Expands Across Middle East and Asia to Accelerate Cybersecurity Upskilling

Cary, North Carolina, USA, 18th December 2025, CyberNewsWire...

China-Aligned Threat Group Uses Windows Group Policy to Deploy Espionage Malware

A previously undocumented China-aligned threat cluster dubbed LongNosedGoblin has been attributed to a series of cyber attacks targeting governmental entities in Southeast Asia and Japan. The end goal of these attacks is cyber espionage, Slovak cybersecurity company ESET said in a report publishe...

China-Linked Ink Dragon Hacks Governments Using ShadowPad and FINALDRAFT Malware

The threat actor known as Jewelbug has been increasingly focusing on government targets in Europe since July 2025, even as it continues to attack entities located in Southeast Asia and South America. Check Point Research is tracking the cluster under the name Ink Dragon. It's also referenced by t...

NANOREMOTE Malware Uses Google Drive API for Hidden Control on Windows Systems

Cybersecurity researchers have disclosed details of a new fully-featured Windows backdoor called NANOREMOTE that uses the Google Drive API for command-and-control C2 purposes. According to a report from Elastic Security Labs, the malware shares code similarities with another implant codenamed...

Budget Samsung phones shipped with unremovable spyware, say researchers

A controversy over data-gathering software secretly installed on Samsung phones has erupted again after a new accusatory post appeared on X last week. In the post on the social media site, cybersecurity newsletter International Cyber Digest warned about a secretive application called AppCloud tha...

Exploring AI in Steganography and Steganalysis: Trends, Clusters, and Sustainable Development Potential

Steganography and steganalysis are strongly related subjects of information security. Over the past decade, many powerful and efficient artificial intelligence AI - driven techniques have been designed and presented during research into steganography as well as steganalysis. This study presents a...

EUVD-2025-138432

Malicious code in polymer-asia-gifgaf npm...

Malicious code in guras-asia-nguye (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1adab17972c15caa7faa7438a08aaea1a3eb8fd14d8cd0735ee2941bc92f42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-asia-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fef1eb6e329ecece75e0dfef8538545ff6311683490344b22f04885b652918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-asia-bru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbd6e3bc4d5510baf4dcaaade2d9e74f20e636d67be1f915875e0432faff542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-asia-thai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60190b628dcfcf72fd62afbcafa8ffd4cf81aabfbb1791fd3bdcc2626d700fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-asia-nguy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dec6dd05dac813c9e303f620294c4109d49f88ab393f921bb2eaa69bd913279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anaislah-pafkai-asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8cc5e01c097f666de4cb46fd5e0c691acb9b57a4771c9b1b94bb6135bb539b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-asia-t (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b1c8b4b6a595142fbaf255a932612159acf70fb1a9feaca12e2fa2f388180f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-asia-bang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a30634e2dd308ce521fefbe1c634d5e98dcacf263f42708644ee625c724a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-asia-thail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b53e055514737efdb8eafabdcb637734849cd0d75e69ac84fcf7a9ca230dc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokirane-asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76bfbcbf6ff0c7e5c7e5922407e8891fe4812ee2030e6cb0d762405f85897da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-asia-vietna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5dabe0b3bda2c010422810f9a12829c5bca0a0cb1f1bd4f1c3caa22e1623b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-asia-ba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5294e2dc00136de019b5cf2715baec3828307c4d8dc114c3070df97a2bce188a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...