TwoSail Junk
Also reported as Operation Poisoned News. Linked to China by one source.
Reports per quarter
CVEs named in reports
- CVE-2015-5119 KEV
- CVE-2017-13861
- CVE-2018-4241
- CVE-2018-4243
- CVE-2019-1367 KEV ransomware
- CVE-2019-6225
- CVE-2019-8605 KEV
- CVE-2020-1938 KEV
- CVE-2020-8794
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
Lotus Blossom, Spring Dragon, Thrip
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Lotus Blossom, Spring Dragon, Thrip
-
An overview of targeted attacks and APTs on Linux
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor An overview of targeted attacks and APTs on Linux
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor New Android Spyware ActionSpy Revealed via Phishing Attacks from Earth Empusa - TrendLabs Security Intelligence Blog
-
New Android Spyware ActionSpy Revealed via Phishing Attacks from Earth Empusa
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor New Android Spyware ActionSpy Revealed via Phishing Attacks from Earth Empusa
-
iOS exploit chain deploys LightSpy feature-rich malware
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor iOS exploit chain deploys LightSpy feature-rich malware
Show all 14 reports Show fewer
-
iOS exploit chain deploys “LightSpy” feature-rich malware _ Securelist
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor iOS exploit chain deploys “LightSpy” feature-rich malware _ Securelist
-
Operation Poisoned News- Hong Kong Users Targeted With Mobile Malware via Local News Links
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Operation Poisoned News- Hong Kong Users Targeted With Mobile Malware via Local News Links
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Operation Poisoned News_ Hong Kong Users Targeted With Mobile Malware via Local News Links - TrendLabs Security Intelligence Blog
Newest first. Details opens the report in Explore.