article thumbnail

China-linked Budworm APT returns to target a US entity

Security Affairs

The China-linked APT27 group has been active since 2010, it targeted organizations worldwide, including U.S. defense contractors , financial services firms, and a national data center in Central Asia. Masqueraded names included securityhealthservice.exe, secu.exe, vfhost.exe, vxhost.exe, vx.exe, and v.exe.”

article thumbnail

Emissary Panda updated its weapons for attacks in the past 2 years

Security Affairs

The Emissary Panda APT (aka LuckyMouse , APT27, Threat Group 3390, and Bronze Union) has been active since 2010, targeted organizations worldwide, including U.S. defense contractors , financial services firms, and a national data center in Central Asia. Windows NT 6.3; ” continues the analysis.

IT 80