Threat Digest

Diagram of LucidRook malware infection chains targeting Taiwan organizations

LucidRook's Lua Stealth Assault on Taiwan's NGOs and Universities

A phishing email disguised as a government notice. Click. LucidRook unfolds its Lua payload, slipping past defenses in targeted hits on Taiwan. Cisco Talos warns: this is mature tradecraft at work.

4 min read 1 month, 1 week ago

Diagram of LucidRook malware infection chains targeting Taiwanese NGOs via phishing lures

Ransomware & Malware

LucidRook Unleashed: New Lua Malware Stalks Taiwan's NGOs in Stealthy Spear-Phishing

A shadowy group called UAT-10362 is phishing Taiwanese NGOs with archives hiding LucidRook, a Lua-powered beast that sidesteps defenses like a ghost in the machine. This isn't random spam—it's targeted espionage with tricks straight out of a cyber spy novel.

5 min read 1 month, 1 week ago

Dashboard of NEXUS Listener showing stolen credentials from breached Next.js hosts

Threat Intelligence

766 Next.js Servers Gutted by CVE-2025-55182: Hackers Snag Keys, Secrets, and Your Whole Damn Infra Map

Next.js promised smoothly full-stack bliss. Then CVE-2025-55182 let hackers raid 766 hosts, grabbing credentials and mapping entire infrastructures for the dark web auction.

5 min read 1 month, 2 weeks ago

#cisco-talos

LucidRook's Lua Stealth Assault on Taiwan's NGOs and Universities

LucidRook Unleashed: New Lua Malware Stalks Taiwan's NGOs in Stealthy Spear-Phishing

766 Next.js Servers Gutted by CVE-2025-55182: Hackers Snag Keys, Secrets, and Your Whole Damn Infra Map