Gorbag APT group hits Ukrainian courts and city councils with self-deleting malware

ESET has been tracking a Russia-aligned group it calls Gorbag, which has been breaking into Ukrainian organizations since at least February 2025 using spearphishing attachments and a stealer that erases itself once the data is gone. Spearphishing email message from a compromised email sender (Source: ESET) Every target ESET identified sits in Ukraine. About a quarter are law enforcement and justice bodies, another qu…

بدافزار و آلودگی هوش تهدید
خواندن متن کامل در Help Net Security درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Help Net Security

Live Q&A: CISSP exam prep with ISC2 experts

Join ISC2 on November 6, 2026 at 7:00pm CET for a live Q&A about the CISSP exam. A panel of experts will answer your questions, explain what it takes to earn the certification, and walk through the exam domains. You’ll also learn about self-study resources and training options to help you prepare for exam day. You’ll learn: How CISSP builds your end-to-end foundational understanding of cybersecurity Why vendor-neutra…

Help Net Security

Cyberattack hits French blood banks

Three blood banks have detected and reversed a potentially destructive temperature spike in their cold rooms, following a cyberattack that targeted a refrigeration equipment provider of the French Blood Establishment (EFS), the only civilian blood collection and transfusion organization in France. Monitoring systems caught the anomalies in time “Although the EFS was not directly targeted by this cybersecurity inciden…

CyberInsider

NIKKE PC launcher delivered malware that let hackers control players’ computers

The team behind Goddess of Victory: NIKKE has updated its PC launcher after finding signs that a third party may have tampered with its scripts. An independent analysis found that modified files on the publisher’s content delivery network could install malware capable of remotely controlling players’ computers and stealing credentials. The technical report, published on … The post NIKKE PC launcher delivered malware…

Help Net Security

Impart uses AI to build virtual patches without putting models in the traffic path

Impart Security has launched the Runtime Defense Harness, a controlled environment where AI agents write and test virtual patches for new vulnerabilities without putting AI in the traffic path. The launch comes as exploits increasingly outpace fixes. In the harness, agents build each virtual patch against the customer’s own traffic, an engineer approves it, and Impart’s engine enforces it as deterministic code. Secur…