APT
How To Add, Remove and Update Software in Debian and Ubuntu Using Apt
Linux has a multitude of ways to install software. We can build our own executables or use AppImage to run containerized applications. But at the heart of many Linux distros is a package management system, which for Debian based systems, such as the Raspberry Pi and Ubuntu, is Apt. Apt, the Advanced Packaging Tool is…
TheWizards APT group uses SLAAC spoofing to perform adversary-in-the-middle attacks
In this blogpost, ESET researchers provide an analysis of Spellbinder, a lateral movement tool for performing adversary-in-the-middle attacks, used by the China-aligned threat actor that we have named TheWizards. Spellbinder enables adversary-in-the-middle (AitM) attacks, through IPv6 stateless address autoconfiguration (SLAAC) spoofing, to move laterally in the compromised network, intercepting packets and redirecting the traffic of…
State-aligned APT groups are increasingly deploying ransomware – and that’s bad news for everyone
The blurring of lines between cybercrime and state-sponsored attacks underscores the increasingly fluid and multifaceted nature of today’s cyberthreats 07 Jan 2025 • , 5 min. read There was a time when the boundary between cybercrime and state-aligned threat activity was rather easy to discern. Cybercriminals were fuelled solely by the profit motive. And their…