BotNet News

Cyberthreat News is a weekly publication that covers the latest news and trends in cybersecurity. The Cyberthreat News team gathers intelligence from multiple sources, including government agencies, security vendors and industry publications, to produce this report. This newsletter was created to help executives understand and communicate the threats that impact their organizations.

April 2024: Russian-linked hackers attacked several U.S. government agencies, breaching systems at the Department of Energy and other departments. The attackers used a phishing campaign to compromise victim computers, then deployed backdoor malware to gain persistent access. The backdoor allowed attackers to engage in follow-on data theft, reconnaissance and surveillance activities.

June 2024: Hackers reportedly breached a Department of Defense contractor, infecting victim devices with malware to exfiltrate sensitive data. The attack impacted more than 1,000 DoD devices, and the hackers reportedly gained access to confidential information about the U.S. military’s nuclear arsenal and the locations of key military facilities.

September 2024: A Chinese cyberespionage group was able to penetrate the networks of an East Asian data protection company that serves military and other government entities over the course of more than a year. The attackers were able to leverage vulnerabilities in the company’s Microsoft Internet Information Services server to install and execute malware.

October 2025: Hackers reportedly compromised the data systems of SimonMed Imaging, a healthcare technology provider that provides medical imaging for more than 1.2 million patients. The hackers then uploaded 23 million patient records to data-trading forums and demanded $1 million in ransom payments.