Resources
Welcome to our Cyber Hub! Explore the latest security updates, case studies, and upcoming events
APT 41 Injecting ShadowPad with Sideloading
The HackersEye DFIR team's investigation into an APT41 attack uncovered the group's expertise in leveraging sophisticated tactics to target enterprise environments. The campaign began with a compromised VPN appliance, which enabled initial access, followed by lateral movement using RDP. The early indicators of compromise were only subtle traces, such as unusual DNS activity from spoolsv.exe.
Overview – MuddyWater Operations on Israel Infra
Since October 7, 2024, MuddyWater has significantly ramped up its cyber operations targeting organizations in Israel. This surge in activity is part of a broader campaign that involves deploying a new custom malware implant called BugSleep.
This backdoor allows MuddyWater to execute remote commands and transfer files on compromised systems, marking a shift from their previous use of legitimate remote management tools like Atera Agent and Screen Connect.
AsyncRAT, WebDAV, and Bad OpSec Walk into an Israeli Bar
In March 2025, an advanced threat actor group decided to target Israel with an AsyncRAT / PureLogs campaign, deployed via an interesting “soft point” in windows security, the WebDAV.
Israeli National Cyber Directorate Training
HackersEye Leads Training with Israeli National Cyber Directorate
LOG4J exploit shocks cyber security
Explore how NSO’s Pegasus spyware exploited iOS vulnerabilities through sophisticated tactics, reshaping the cybersecurity landscape by making advanced hacking tools available to private entities.
Iranian Hackers Claim Breach on Intel Israel
Iranian hacking group Pay2Key launches a ransomware attack on Intel Israel, threatening to expose sensitive data from its AI processor chip subsidiary, Habana Labs, unless demands are met.
Tails from the shadow
This article reveals APT41’s cyber operations using Logger.exe to deploy ShadowPad malware through DLL sideloading. Discover how this group evades detection, leverages sophisticated attack methods, and what strategies can mitigate this advanced threat.
