{"id":39383,"date":"2021-02-01T15:52:09","date_gmt":"2021-02-01T15:52:09","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/31976\/Suspected-Hezbollah-APT-Group-Breached-250-Servers.html"},"modified":"2021-02-01T15:52:09","modified_gmt":"2021-02-01T15:52:09","slug":"suspected-hezbollah-apt-group-breached-250-servers","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/suspected-hezbollah-apt-group-breached-250-servers\/","title":{"rendered":"Suspected Hezbollah APT Group Breached 250 Servers"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/www.scmagazine.com\/wp-content\/uploads\/sites\/2\/2021\/01\/hezbollah-scaled-e1611964889917.jpg\" class=\"ff-og-image-inserted\"><\/div>\n<div class=\"wysiwyg\">\n<p>Some 250 servers were apparently breached by the Lebanese Cedar APT group, an organization with <a href=\"https:\/\/www.csmonitor.com\/World\/Passcode\/2015\/0601\/Cyberattack-tied-to-Hezbollah-ups-the-ante-for-Israel-s-digital-defenses\">suspected links<\/a> to the <a href=\"https:\/\/www.rand.org\/blog\/2017\/09\/how-hezbollah-came-to-dominate-information-warfare.html\">Hezbollah<\/a> Cyber Unit in Lebanon.<\/p>\n<p>The target victims include companies from many countries, including the United States, United Kingdom, Saudi Arabia, Egypt, Jordan, Lebanon, <a href=\"https:\/\/www.scmagazine.com\/home\/security-news\/apts-cyberespionage\/israel-iran-trade-cyberattacks\/\">Israel<\/a> and the Palestinian Authority. Valuable information was stolen over periods of months and years, ClearSky researchers wrote in a <a href=\"https:\/\/www.clearskysec.com\/cedar\/\" target=\"_blank\" rel=\"noreferrer noopener\">blog<\/a> posted.<\/p>\n<p>The security firm, which <a href=\"https:\/\/www.clearskysec.com\/wp-content\/uploads\/2021\/01\/Lebanese-Cedar-APT.pdf\">first detected<\/a> suspicious activity in early 2020, said the attack was based on a modified JSP file browser with a unique string that the adversary used to deploy \u201cExplosive\u201d V4 Remote Access Tool (RAT) or \u201cCaterpillar\u201d V2 WebShell in the victims\u2019 networks. The file was installed in vulnerable Atlassian Jira and Oracle 10g servers. Lebanese Cedar exploited 1-day publicly known vulnerabilities such as <a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2012-3152\">C<\/a><a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2012-3152\">VE-2012-3152<\/a> to install the JSP in vulnerable servers.<\/p>\n<p>The APT group \u2013 also referred to as \u201cVolatile Cedar\u201d \u2013 has been operating since 2012 and has kept a low profile, flying under the radar, since <a href=\"https:\/\/www.scmagazine.com\/home\/security-news\/volatile-cedar-apt-group-spies-on-enterprises-focusing-on-lebanese-companies\/\" target=\"_blank\" rel=\"noreferrer noopener\">2015<\/a> when its operations were first discovered by&nbsp;<a href=\"https:\/\/blog.checkpoint.com\/2015\/03\/31\/volatilecedar\/\" target=\"_blank\" rel=\"noreferrer noopener\">CheckPoint<\/a>&nbsp;researchers and&nbsp;<a href=\"https:\/\/securelist.com\/sinkholing-volatile-cedar-dga-infrastructure\/69421\/\" target=\"_blank\" rel=\"noreferrer noopener\">Kaspersky Labs<\/a>.<\/p>\n<p>ClearSky agrees with CheckPoint\u2019s initial report that Lebanese Cedar APT is motivated by political and ideological interests, targeting individuals, companies and institutions worldwide and has strong ties to the Lebanese government or a political group in Lebanon.<\/p>\n<p>The Lebanese group\u2019s attacks started by using known vulnerabilities on public web servers, then distributing custom malware to steal files, while staying hidden, said Ivan Righi, cyber threat intelligence analyst at Digital Shadows, added that. The group has used a custom-written malware called \u201cExplosive,\u201d an info-stealing Trojan that the group has used since 2015, he said. The Explosive malware appears to have gone through multiple versions, usually updated to avoid antivirus detection.<\/p>\n<p>\u201cThe latest campaign used a new version of Explosive with new capabilities,\u201d Righi said. \u201cLebanese Cedar, or Volatile Cedar, is technically-advanced and has shown effective use of tactics, characterizing them as a high-level threat. Activity was last publicly-reported on in 2015 and is linked to the Shia Islamist political party and militant group Hezbollah. They likely conducted this campaign to support Hezbollah\u2019s motives to obtain sensitive information.\u201d<\/p>\n<\/p><\/div>\n<section class=\"post-tags\">\n<h2>Topics:<\/h2>\n<p> <a href=\"https:\/\/www.scmagazine.com\/tag\/cyberespionage\/\" class=\"button -secondary\">Cyberespionage<\/a> <a href=\"https:\/\/www.scmagazine.com\/tag\/threat-intelligence\/\" class=\"button -secondary\">Threat intelligence<\/a> <a href=\"https:\/\/www.scmagazine.com\/tag\/threat-security-intelligence\/\" class=\"button -secondary\">Threat Security Intelligence<\/a> <\/section>\n<p> READ MORE <a href=\"https:\/\/packetstormsecurity.com\/news\/view\/31976\/Suspected-Hezbollah-APT-Group-Breached-250-Servers.html\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":39384,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[277],"tags":[9185],"class_list":["post-39383","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity-blogs","tag-headlinehackercyberwarterrorbackdoor"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Suspected Hezbollah APT Group Breached 250 Servers 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/suspected-hezbollah-apt-group-breached-250-servers\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Suspected Hezbollah APT Group Breached 250 Servers 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/suspected-hezbollah-apt-group-breached-250-servers\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2021-02-01T15:52:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/02\/suspected-hezbollah-apt-group-breached-250-servers.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2240\" \/>\n\t<meta property=\"og:image:height\" content=\"1461\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/suspected-hezbollah-apt-group-breached-250-servers\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/suspected-hezbollah-apt-group-breached-250-servers\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Suspected Hezbollah APT Group Breached 250 Servers\",\"datePublished\":\"2021-02-01T15:52:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/suspected-hezbollah-apt-group-breached-250-servers\\\/\"},\"wordCount\":372,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/suspected-hezbollah-apt-group-breached-250-servers\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/02\\\/suspected-hezbollah-apt-group-breached-250-servers.jpg\",\"keywords\":[\"headline,hacker,cyberwar,terror,backdoor\"],\"articleSection\":[\"CyberSecurity Blogs\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/suspected-hezbollah-apt-group-breached-250-servers\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/suspected-hezbollah-apt-group-breached-250-servers\\\/\",\"name\":\"Suspected Hezbollah APT Group Breached 250 Servers 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/suspected-hezbollah-apt-group-breached-250-servers\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/suspected-hezbollah-apt-group-breached-250-servers\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/02\\\/suspected-hezbollah-apt-group-breached-250-servers.jpg\",\"datePublished\":\"2021-02-01T15:52:09+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/suspected-hezbollah-apt-group-breached-250-servers\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/suspected-hezbollah-apt-group-breached-250-servers\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/suspected-hezbollah-apt-group-breached-250-servers\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/02\\\/suspected-hezbollah-apt-group-breached-250-servers.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/02\\\/suspected-hezbollah-apt-group-breached-250-servers.jpg\",\"width\":2240,\"height\":1461},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/suspected-hezbollah-apt-group-breached-250-servers\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"headline,hacker,cyberwar,terror,backdoor\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/headlinehackercyberwarterrorbackdoor\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Suspected Hezbollah APT Group Breached 250 Servers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Suspected Hezbollah APT Group Breached 250 Servers 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/suspected-hezbollah-apt-group-breached-250-servers\/","og_locale":"en_US","og_type":"article","og_title":"Suspected Hezbollah APT Group Breached 250 Servers 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/suspected-hezbollah-apt-group-breached-250-servers\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2021-02-01T15:52:09+00:00","og_image":[{"width":2240,"height":1461,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/02\/suspected-hezbollah-apt-group-breached-250-servers.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/suspected-hezbollah-apt-group-breached-250-servers\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/suspected-hezbollah-apt-group-breached-250-servers\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Suspected Hezbollah APT Group Breached 250 Servers","datePublished":"2021-02-01T15:52:09+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/suspected-hezbollah-apt-group-breached-250-servers\/"},"wordCount":372,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/suspected-hezbollah-apt-group-breached-250-servers\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/02\/suspected-hezbollah-apt-group-breached-250-servers.jpg","keywords":["headline,hacker,cyberwar,terror,backdoor"],"articleSection":["CyberSecurity Blogs"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/suspected-hezbollah-apt-group-breached-250-servers\/","url":"https:\/\/www.threatshub.org\/blog\/suspected-hezbollah-apt-group-breached-250-servers\/","name":"Suspected Hezbollah APT Group Breached 250 Servers 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/suspected-hezbollah-apt-group-breached-250-servers\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/suspected-hezbollah-apt-group-breached-250-servers\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/02\/suspected-hezbollah-apt-group-breached-250-servers.jpg","datePublished":"2021-02-01T15:52:09+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/suspected-hezbollah-apt-group-breached-250-servers\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/suspected-hezbollah-apt-group-breached-250-servers\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/suspected-hezbollah-apt-group-breached-250-servers\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/02\/suspected-hezbollah-apt-group-breached-250-servers.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2021\/02\/suspected-hezbollah-apt-group-breached-250-servers.jpg","width":2240,"height":1461},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/suspected-hezbollah-apt-group-breached-250-servers\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"headline,hacker,cyberwar,terror,backdoor","item":"https:\/\/www.threatshub.org\/blog\/tag\/headlinehackercyberwarterrorbackdoor\/"},{"@type":"ListItem","position":3,"name":"Suspected Hezbollah APT Group Breached 250 Servers"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/39383","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=39383"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/39383\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/39384"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=39383"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=39383"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=39383"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}