Starry Addax targets human rights defenders in North Africa with new malware
blog.talosintelligence.com/starry-addax/

Command Injection and Backdoor Account in D-Link NAS Devices
github.com/netsecfish/dli…

APT #Sidewinder C2: NGINX response is fingerprint-able

blog.strikeready.com/blog/rattling-…

rheaeve.substack.com/p/xz-backdoor-…

How APT groups operate in the Middle East
ptsecurity.com/ww-en/analytic…

Re: the #xz #backdoor
Looks like hansjans162 (hansjansen162[@]outlook[.]com) may be an alter ego OR accomplice of JiaT75 (jiat0218[@]gmail[.]com).

e.g. burying a merge request in a bunch of similar requests for games

salsa.debian.org/users/hjansen/…

According to the updated time zone, It may be a national APT Group.

A review of zero-day in-the-wild exploits in 2023
github.com/blackorbird/AP…

Operation FlightNight: Indian Government Entities and Energy Sector Targeted by Cyber Espionage Campaign
blog.eclecticiq.com/operation-flig…

#APT37 LNK -> Pcloud -> Gmail -> APK
--wwjaughalvncjwiajs--
genians.co.kr/blog/threat_in…

About how to detect Pegasus and other spyware on iOS device.
group-ib.com/blog/pegasus-s…

APT33 send a command to the backdoor in real time using SignalR.
unit42.paloaltonetworks.com/curious-serpen…

2023 Annual Report From rf
github.com/blackorbird/AP…

#kimsuky
1q2w3e4r
asec-ahnlab-com.translate.goog/ko/62117/?_x_t…

SmokeLoader IOCs list
github.com/blackorbird/AP…

#Kimsuky
dropbox+lnk
securonix.com/blog/securonix…