Threat Advisories:

July 2025 Linux Patch Roundup Operation CargoTalon: Targeting Russian Aerospace & Defense Sector Greedy Sponge’s Stealthy RAT Attack in Mexico COLDRIVER Creeps Closer with LOSTKEYS Malware Operation RoundPress: APT28’s Webmail Espionage Exposed TransferLoader: The Malware That Outsmarts Security CVE-2025-4664: Google Chrome’s Zero-Day Flaw Exploited in the Wild Microsoft Shuts Down Five Zero-Days in Latest Patch Rollout Ivanti Addresses Critical Zero-Day Vulnerabilities in EPMM Software Samsung Patches Actively Exploited MagicINFO 9 Server Zero-Day Exploited in the Wild: Fortinet Urges Patch for Critical Zero-Day Espionage Ops Exploit Output Messenger Vulnerability PupkinStealer: The Silent Thief Hiding in Plain Sight Popular npm Package ‘rand-user-agent’ Compromised in Supply Chain Attack APT36’s Dark Playbook: Crimson Codes and Crisis Lures Strike India DragonForce Is Selling DIY Ransomware Kits Agenda Ransomware Group Escalates Attacks with New Multi-Stage Loaders Earth Kasha Returns with New Tools in Its Cyber Espionage Campaign Critical Firefox Flaw CVE-2025-2857 Lets Attackers Escape Sandbox Silent Escalation: CLFS Zero-Day Used in Targeted Attack

Partner Program

Book a Demo Threat Digest - Subscribe

Operation CargoTalon: Targeting Russian Aerospace & Defense Sector

Red | Attack Report

Operation CargoTalon is a targeted cyber-espionage campaign by threat group UNG0901, aimed at Russia’s aerospace and defense sector. It uses malicious .LNK files to deliver the lightweight EAGLET implant, enabling stealthy data exfiltration and persistent access. The campaign highlights advanced social engineering and malware evasion tactics.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox