Cybersecurity researchers have uncovered a sophisticated, stealth-focused attack campaign targeting WordPress sites. The operation exploits Stored Cross-Site Scripting (XSS) vulnerabilities in two popular plugins—Ninja Forms and WPC Product Bundles for WooCommerce—to silently install an invisible administrative account and leave behind up to four distinct vectors for future unauthorized access. According to a comprehensive technical analysis […]
Stealth and Surveillance: The Resurgence of the ScanBox Framework in South China Sea Espionage
In a chilling reminder that digital espionage is rarely deterred by legal indictments, a sophisticated threat actor linked to the Chinese government has launched a fresh campaign of cyber-surveillance. Researchers from Proofpoint and PwC have uncovered a coordinated "watering hole" attack utilizing the infamous ScanBox JavaScript-based reconnaissance framework. This campaign, which targeted Australian organizations and […]
Stealth and Surveillance: The Resurgence of the ScanBox Framework in Chinese Cyber-Espionage
In a sophisticated display of geopolitical intelligence gathering, the China-based threat actor known as TA423—alternatively referred to by the cybersecurity community as Red Ladon—has been caught deploying the legacy ScanBox reconnaissance framework in a series of targeted watering hole attacks. Recent findings from the threat intelligence teams at Proofpoint and PwC have shed light on […]