5 verified briefings on Espionage. Each story includes a plain-English summary, why it matters, and the concrete action engineering teams should take.
Russia's FSB intelligence agency has accused foreign spy services of compromising the smartphones of senior Russian officials. The agency claims the devices were turned into surveillance tools capable of stealing data, recording conversations, and covertly activating microphones and cameras to monitor their surroundings.
A new report from Symantec and Carbon Black links the Iranian hacking group MuddyWater to a recent espionage campaign. The activity, observed in early 2026, targeted at least nine organizations across nine countries, including sectors like manufacturing, education, public sector bodies, and financial and professional services.
The North Korean state-sponsored group Kimsuky is targeting South Korean military and corporate entities with new malware. The group is using a backdoor called HTTPSpy, another named HelloDoor, and is abusing Visual Studio Code Tunnels for command-and-control, demonstrating an evolution in their attack methods.
Attackers spent five months inside a stock exchange executive's Outlook mailbox. They slowly exfiltrated emails by routing them through Dropbox and OneDrive to avoid detection. The campaign, reported by Symantec and Carbon Black, appears to be a case of corporate espionage rather than direct financial theft.
A China-aligned hacking group known as Webworm is using new custom backdoors, EchoCreep and GraphWorm. The group leverages popular services like Discord and the Microsoft Graph API for its command-and-control communications, primarily targeting government agencies with this updated tooling, according to recent cybersecurity research.