APT41's Expanding Arsenal: Google Calendar C2, Silver Dragon, and the Persistent Threat to U.S. Defense and HealthcareAPT41's Expanding Arsenal: Google Calendar C2, Silver Dragon, and the Persistent Threat to U.S. Defense and Healthcare RedSheep Reports | March 16, 2026 APT41 is not slowing down. The Chinese-nexus threat group has spawned a newly identified sub-clus...Mar 18 · 29 min readredsheeptrends.hashnode.dev
CL-STA-1087: China-Linked Espionage Cluster Targets Southeast Asian Militaries with Custom BackdoorsCL-STA-1087: China-Linked Espionage Cluster Targets Southeast Asian Militaries with Custom Backdoors RedSheep Reports | March 17, 2026 An espionage operation assessed with moderate confidence to be Chinese state-sponsored has been quietly siphoning m...Mar 17 · 14 min readredsheeptrends.hashnode.dev
Handala Weaponizes Microsoft Intune to Wipe 200,000 Stryker Devices Across 79 CountriesHandala Weaponizes Microsoft Intune to Wipe 200,000 Stryker Devices Across 79 Countries On March 11, 2026, the Iran-linked hacktivist group Handala claimed responsibility for a massive wiper attack against Stryker, the Fortune 500 medical technology ...Mar 13 · 8 min readredsheeptrends.hashnode.dev
FortiGate Exploitation Campaign: How Stolen Service Accounts Enable Rogue Workstation Deployment and Full AD CompromiseFortiGate Exploitation Campaign: How Stolen Service Accounts Enable Rogue Workstation Deployment and Full AD Compromise Attackers are actively exploiting three critical authentication bypass vulnerabilities in Fortinet products to compromise FortiGat...Mar 12 · 9 min readredsheeptrends.hashnode.dev
North Korean Hackers Poisoned Polyfill.io Library to Target 100,000 WebsitesNorth Korean Hackers Poisoned Polyfill.io Library to Target 100,000 Websites Over 100,000 websites just got a nasty surprise. The popular polyfill.io JavaScript library, used by developers worldwide to ensure browser compatibility, was compromised in...Mar 12 · 5 min readredsheeptrends.hashnode.dev
