Svoboda Cybersecurity Brief May 26, 2025

May 26, 2025

bulletproof VPN - stay anonymous

Dutch Government Expands Espionage Law to Include Digital and Diaspora Espionage

The Netherlands has updated its criminal code to include digital espionage and diaspora espionage as criminal offenses, effective May 15. The law targets leaks of sensitive non-state secrets, foreign government covert activities, and threats to critical infrastructure, with penalties up to 12 years in prison. It also addresses espionage targeting diaspora communities, where foreign governments collect personal data or manipulate migrants.
Source: DataBreaches.net

Hackers Use Fake VPN and Browser Installers to Spread Winos 4.0 Malware

A campaign using trojanized NSIS installers (masquerading as QQ Browser and LetsVPN) delivers the Winos 4.0 (ValleyRAT) malware via a memory-resident loader called Catena. The malware, linked to Silver Fox APT, evades detection using reflective DLL injection and targets Chinese-speaking users, with C2 servers hosted in Hong Kong.
Impact: Remote access, data theft, and DDoS capabilities.
Mitigation: Verify installer authenticity, monitor for unsigned processes, and block suspicious C2 IPs (e.g., 134.122.204.11, 103.46.185.44).
Source: The Hacker News

Glitch to Discontinue App Hosting and User Profiles

No actionable cybersecurity impact or technical details provided.
Source: BleepingComputer

Share this brief: https://svo.bz/SClq

If you want to support us, you can donate here: Donate