Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools

Threat Score:
80
The Hacker News
2 hours ago

Overview

A Chinese-speaking advanced persistent threat (APT) actor has been observed targeting web infrastructure entities in Taiwan using customized versions of open-sourced tools with an aim to establish long-term access within high-value victim environments. The activity has been attributed by Cisco Talos to an activity cluster it tracks asUAT-7237, which is believed to be active since at least 2022. The hacking group is assessed to be a sub-group ofUAT-5918, which is known to be attacking critical in...

Related Articles

5 articles
3
Colt Telecom attack claimed by WarLock ransomware, data up for sale

Colt Telecom attack claimed by WarLock ransomware, data up for sale

BleepingComputer • 3 hours ago

Colt Telecom attack claimed by WarLock ransomware, data up for sale Bill Toulas August 15, 2025 11:25 AM 0 UK-based telecommunications company Colt Technology Services is dealing with a cyberattack that has caused a multi-day outage of some of the company's operations, including hosting and porting services, Colt Online, and Voice API platforms. The British telecommunications and network services provider disclosed that the attack started on August 12 and the disruption continues as its IT staff

Score
83
Read more