Dossier
spear-phishing
Coverage of spear-phishing in the Nexus archive.
- Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse
A Russian advanced persistent threat (APT) group, Gamaredon, has expanded its cyber attacks against Ukraine in 2025 by deploying new malware and abusing cloud services. Slovakian cybersecurity company ESET reported 35 spear-phishing campaigns conducted by Gamaredon, primarily targeting new entities in the second half of the year.
- WhatsApp says it disrupted new NSO spyware phishing attacks
WhatsApp has detected and stopped spear-phishing campaigns allegedly conducted by the NSO Group after investigating user reports of social engineering attacks.
- New ‘LucidRook’ malware used in targeted attacks on NGOs, universities
A new Lua-based malware named LucidRook is being used in spear-phishing attacks targeting NGOs and universities in Taiwan. The malware is part of targeted campaigns aimed at organizations in the region.