Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for VAPOR PANDA AI-Driven ARTEX Global Espionage Campaign

VAPOR PANDA AI-Driven ARTEX Global Espionage Campaign

VAPOR PANDA is using the ARTEX agentic AI framework and DeepSeek LLM to conduct simultaneous global espionage against foreign ministries and critical infrastructure sectors.

avatar
ills3c Intel&Coffee@Ills3C2 days ago

3 intel reports

Russian GRU and FSB SOHO Router Hijacking Campaigns

Russian intelligence services APT28 (GRU) and FSB Center 16 are systematically compromising SOHO and enterprise routers to build global proxy networks and conduct DNS hijacking for credential theft.

avatar
Kenji Choy@kchoy
4 months ago
29
FSB Center 16 Exploitation of Routers via SNMP

Russian FSB Center 16 (Static Tundra) targets critical infrastructure by exploiting weak SNMP configurations and legacy Cisco vulnerabilities to exfiltrate device configurations.

avatar
Ethan Andrews@eandrews
4 months ago
15
Cisco Smart Install CVE-2018-0171 Exploitation by FSB

Russian FSB Center 16 and Static Tundra are actively exploiting the legacy Cisco Smart Install vulnerability (CVE-2018-0171) to extract device configurations and maintain persistence in critical infrastructure.

avatar
Tim Peck@timpeck
4 months ago
10