Cybersecurity articles tagged #Spear Phishing on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/apt28-s-hookedge-backdoor-targets-european-diplomacyhttps://runtimerebel.com/blog/apt28-s-hookedge-backdoor-targets-european-diplomacyRussian state-sponsored BlueDelta (APT28) leverages HOOKEDGE backdoor via macro-enabled documents to target European government and diplomatic entities.Tue, 01 Sep 2026 02:51:27 GMTSpear PhishingBlueDeltaAPT28HOOKEDGEHEADLACEhttps://runtimerebel.com/blog/detecting-ai-driven-polymorphic-phishing-attackshttps://runtimerebel.com/blog/detecting-ai-driven-polymorphic-phishing-attacksAI-powered phishing attacks leverage personalization and polymorphic evasion, challenging traditional filters. MSPs must focus on post-compromise detection.Fri, 21 Aug 2026 08:29:38 GMTSpear PhishingEmail SecurityThreat DetectionAI Powered PhishingPolymorphic Phishinghttps://runtimerebel.com/blog/nso-group-s-whatsapp-phishing-blocked-meta-files-contempt-orderhttps://runtimerebel.com/blog/nso-group-s-whatsapp-phishing-blocked-meta-files-contempt-orderMeta detected and blocked new spear-phishing attacks by NSO Group targeting WhatsApp users, leading to a federal court contempt order filing.Mon, 08 Jun 2026 20:57:34 GMTNSO GroupWhatsAppPhishingSpear PhishingSpyware VendorMetahttps://runtimerebel.com/blog/china-s-dual-method-cyberattack-targets-czech-taiwan-orgs-with-azureveilhttps://runtimerebel.com/blog/china-s-dual-method-cyberattack-targets-czech-taiwan-orgs-with-azureveilNation-state actors linked to China employ dual-method spear-phishing with Azureveil malware to target Czech and Taiwan organizations for data theft.Tue, 02 Jun 2026 21:12:29 GMTChinaAzureveilSpear PhishingData TheftCzech RepublicTaiwanNation Statehttps://runtimerebel.com/blog/operation-dragon-weave-apt-targeting-czech-republic-and-taiwanhttps://runtimerebel.com/blog/operation-dragon-weave-apt-targeting-czech-republic-and-taiwanChina-aligned Operation Dragon Weave targets Czech and Taiwanese government and tech sectors using spear-phishing to deploy the AdaptixC2 agent framework.Mon, 01 Jun 2026 14:10:57 GMTOperation Dragon WeaveAdaptixC2China AlignedSpear PhishingCzech RepublicTaiwanhttps://runtimerebel.com/blog/frostyneighbor-apt-targets-poland-ukraine-gov-with-spear-phishinghttps://runtimerebel.com/blog/frostyneighbor-apt-targets-poland-ukraine-gov-with-spear-phishingBelarussian APT 'FrostyNeighbor' is deploying spear-phishing campaigns against Polish and Ukrainian government entities after unique victim fingerprinting, aiming for…Thu, 14 May 2026 20:38:13 GMTFrostyNeighborAPTBelarusPolandUkraineEspionageSpear PhishingGovernmentNation Statehttps://runtimerebel.com/blog/chinese-spear-phishing-campaign-targets-nasa-defense-softwarehttps://runtimerebel.com/blog/chinese-spear-phishing-campaign-targets-nasa-defense-softwareNASA OIG reveals a multi-year spear-phishing campaign by a Chinese national impersonating researchers to exfiltrate sensitive U.S. defense software.Fri, 24 Apr 2026 16:25:59 GMTNASAChinaSpear PhishingExport ControlDefense SoftwareOIG Reporthttps://runtimerebel.com/blog/uat-10362-targets-taiwanese-ngos-with-lucidrook-malwarehttps://runtimerebel.com/blog/uat-10362-targets-taiwanese-ngos-with-lucidrook-malwareRuntime Rebel analyzes UAT-10362's sophisticated spear-phishing campaigns deploying new Lua-based LucidRook malware against Taiwanese NGOs and universities.Fri, 10 Apr 2026 00:40:34 GMTUAT 10362LucidRookTaiwanNGOSpear PhishingLua MalwareRust MalwareAPThttps://runtimerebel.com/blog/star-blizzard-apt28-adopts-darksword-ios-exploit-kithttps://runtimerebel.com/blog/star-blizzard-apt28-adopts-darksword-ios-exploit-kitRussian APT Star Blizzard (APT28) now uses the DarkSword iOS exploit kit to target government, finance, and academia, increasing mobile threat exposure.Mon, 30 Mar 2026 12:35:23 GMTStar BlizzardAPT28Fancy BearNobeliumDarkSwordiOSExploit KitState SponsoredMobile SecuritySpear Phishinghttps://runtimerebel.com/blog/iranian-linked-handala-group-breaches-kash-patel-s-personal-emailhttps://runtimerebel.com/blog/iranian-linked-handala-group-breaches-kash-patel-s-personal-emailFBI confirms Iranian-linked Handala hackers breached Director nominee Kash Patel's personal email, leaking documents and highlighting spear-phishing risks.Mon, 30 Mar 2026 00:41:00 GMTHandalaIranKash PatelFBISpear PhishingEspionagehttps://runtimerebel.com/blog/ta446-deploys-leaked-darksword-ios-exploit-kit-technical-analysishttps://runtimerebel.com/blog/ta446-deploys-leaked-darksword-ios-exploit-kit-technical-analysisRussian threat actor TA446 (Callisto) is targeting iOS users with the leaked DarkSword exploit kit. Learn how to detect and defend against this campaign.Sat, 28 Mar 2026 08:18:53 GMTTA446CallistoDarkSwordiOS ExploitationSpear Phishinghttps://runtimerebel.com/blog/sidewinder-apt-expands-southeast-asia-espionage-campaignhttps://runtimerebel.com/blog/sidewinder-apt-expands-southeast-asia-espionage-campaignSideWinder APT targets government and telecom sectors in Southeast Asia using spear-phishing and rotating infrastructure for persistent espionage operations.Wed, 18 Mar 2026 16:31:14 GMTSideWinderAPTSoutheast AsiaSpear PhishingCVE-2017-11882https://runtimerebel.com/blog/konni-group-deploys-endrat-via-phishing-and-kakaotalk-hijackinghttps://runtimerebel.com/blog/konni-group-deploys-endrat-via-phishing-and-kakaotalk-hijackingNorth Korean threat actor Konni leverages spear-phishing and KakaoTalk desktop exploitation to distribute EndRAT malware and facilitate lateral movement.Tue, 17 Mar 2026 12:30:14 GMTKonniEndratKakaotalkAPTSpear Phishinghttps://runtimerebel.com/blog/muddywater-deploys-bugsleep-backdoor-in-targeted-regional-campaignshttps://runtimerebel.com/blog/muddywater-deploys-bugsleep-backdoor-in-targeted-regional-campaignsIranian state actor MuddyWater introduces the custom BugSleep backdoor, targeting Middle Eastern and African entities using spear-phishing and RMM abuse.Tue, 24 Feb 2026 08:22:38 GMTMuddyWaterBugSleepMOISSpear PhishingRMM AbuseIranCyber Espionage