Chinese-speaking threat actor uses leaked DarkSword exploit kit to target iOS devices
Censys noted possible links between DarkSword and Coruna and the UNC6353 threat actor, which has been linked to attacks on Ukraine.
3 min read
Cybersecurity Help is a global vulnerability intelligence provider. We monitor vulnerabilities in software from 60,000+ vendors and help customers prevent potential data breaches by addressing them proactively.
Request DemoCensys noted possible links between DarkSword and Coruna and the UNC6353 threat actor, which has been linked to attacks on Ukraine.
3 min readAttackers used the flaw to access managed devices through the Take Control feature and install Cloudflare Tunnel services to maintain persistence.
2 min readThe attackers manipulate DNS and HTTP traffic to redirect victims through attacker-controlled infrastructure.
3 min readResearchers named the operation 'Fuyao,' describing it as a large and highly organized botnet that had avoided public detection for several years.
3 min readResearchers found that DeepSeek acted as the reasoning engine for Hermes Agent.
4 min read