State‑Linked Operations

Campaigns tied to state actors and their cutouts.

  • 1 Tracked terms
  • Last 30 days Feed window

What this topic collects on

An article joins this feed when it matches these terms. Each one is also a search of its own.

Latest in State‑Linked Operations


en.koreadaily.com > north-korean-hackers-fake-job-interviews

North Korean hackers — Fake Job Interviews Hack 30,000 Computers

3+ hour, 52+ min ago   (243+ words) The Korea Daily North Korean hackers — Fake Job Interviews Hack 30,000 Computers How North Korean Hackers Target IT Professionals North Korean hackers belonging to the state-sponsored cyber espionage group known as ‘WaterPlum’ have compromised at least 30,000 computers across more than 100 countries…...


cybersecuritydive.com > news > china-nexus-steals-thousands-documents-exploitation > 830902

China-nexus actor steals thousands of documents in monthslong exploitation campaign

6+ hour, 2+ min ago   (349+ words) Researchers suspect the hacker employed LLMs to develop custom tools. A Chinese-speaking threat actor has engaged in a hacking campaign at least since June, involving the theft of thousands of documents from, at minimum, one Western government, according to a…...


cybersecuritynews.com > tradertraitor-hackers

North Korean TraderTraitor Hackers Use Fake Terraform Job Tests to Deploy macOS Backdoors

9+ hour, 43+ min ago   (555+ words) North Korean threat actors are using fake Terraform job tests to compromise macOS developers and reach cloud systems. The campaign shows how a routine coding assignment can become an entry point for data theft, remote control, and deeper network intrusion....


redstate.com > rusty-weiss > 09/21/2026 > yikes-how-did-a-california-freeway-sign-get-hacked-with-an-iranian-regime-death-list-n2207178

Yikes: How Did a California Freeway Sign Get Hacked With an Iranian Regime Death List?

10+ hour, 46+ min ago   (430+ words) A digital sign on a Los Angeles freeway was hijacked and used to point drivers to an Iranian regime-linked website that publishes personal details of dissidents living in the city. The Caltrans (California Department of Transportation) sign displayed the address…...


techspot.com > news > 113916-north-korean-hackers-use-fake-coding-tests-infect.html

Hackers use fake coding tests to infect 30,000 devices and steal $10 million in crypto

10+ hour, 54+ min ago   (416+ words) The agencies refer to the group behind the activity as WaterPlum. It targets web designers, software engineers and people working in cryptocurrency and Web3. The group contacts victims while posing as recruiters, then sends what appears to be a coding exercise…...


thehackernews.com > 2026 > 09 > jade-sleet-linked-to-indian-it-provider.html

Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors

11+ hour, 40+ min ago   (585+ words) The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based "much smaller organization" in the information technology (IT) services industry, once again highlighting how the adversary continues to target developers to breach…...


gncrypto.news > news > north-korea-hackers-fake-job-interviews-stole-crypto

North Korea Hackers Stole Crypto in Fake Job Interviews

1+ day, 15+ hour ago   (19+ words) State-linked North Korean hackers used fake technical job interviews to install malware, capture credentials and steal millions in cryptocurrency....


cybersecurity-insiders.com-insiders.com

Iran-Linked Hackers target Windows Machines through WhatsApp and Telegram

3+ day, 4+ hour ago   (444+ words) Cybersecurity Insiders An Iranian hacking group has reportedly launched a new spyware campaign targeting Windows users through popular messaging platforms such as WhatsApp and Telegram. The campaign comes amid heightened geopolitical tensions involving Iran and the United States, raising concerns…...


dev.to > anoymask > sparrowocky-a-new-backdoor-for-latin-american-governments-by-famoussparrow-45

SparroWocky: A New Backdoor for Latin American Governments by FamousSparrow

3+ day, 7+ hour ago   (1523+ words) 1. Basic Information Original Title: Beware the SparroWock: The backdoor that bites, the commands that catch Source: ESET Research Published Date: 2026-09-17 Updated Date: None Severity: High Severity Justification: According to ESET observations, approximately 90% of FamousSparrow targets were concentrated in Latin America…...


ntd.com > ntdplus > report-north-korea-deploying-unlawful-laborers-overseas_1173416.html

Report: North Korea Deploying Unlawful Laborers Overseas

3+ day, 18+ hour ago   (106+ words) The North Korean regime is deploying its laborers overseas in violation of United Nations sanctions. What would you like to watch today? Report: North Korea Deploying Unlawful Laborers Overseas NTD Evening News Full Broadcast (Sept. 17) NTD Good Morning Full Broadcast…...