In brief: Adobe Coldfusion flaws exploited in the wild, a pro-Russian hacktivist arrested in Spain, and more.
The campaign, active since at least August 2022, uses fake software installers and fake websites to turn victims' devices into proxies.
The suspects operated a company that collected LINE accounts registered with Chinese mobile phone numbers and rented them to Chinese hackers.
The ORB network acts as a relay system for other China-linked hacking groups, including UAT-5918.
The suspect is being investigated for alleged membership in and collaboration with a terrorist organization, glorification of terrorism, and computer-related offenses.
The attack uses a fake business invoice that impersonates a legitimate Russian aerospace research institute.
In one operation, the agency used signals intelligence to infiltrate an unnamed ransomware-as-a-service group, rendering its infrastructure inoperable.
