Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Coline Chavane
Silver Fox: The Only Tax Audit Where the Fine Print Installs Malware
Since early 2025, TDR has focused on tracking Silver Fox, a China-based intrusion set. Originally known for financially motivated attacks, the group has been shifting toward more sophisticated, APT-style operations since at least 2024. This dual focus reflects a broader trend observed throughout 2025, which is the increasingly blurred lines between financially motivated cybercrime operators and state-sponsored espionage.
TransparentTribe targets Indian military organisations with DeskRAT
This post was originally distributed as a private FLINT report to our customers on 14 October 2025. It contains a complete list of IOCs, YARA rules, and a chapter dedicated to detection and hunting opportunities specific to this infection chain. In July 2025, CYFIRMA reported a phishing campaign attributed to TransparentTribe(also known as APT36 or Operation C-Major) targeting Linux-based operating systems of Indian governement entities with activity traced back to June 2025.
Predators for Hire: A Global Overview of Commercial Surveillance Vendors
This blogpost is an abridged version of the report. The full version is available as a PDF. Introduction Key takeways Definitions 2010-2015. Emergence of early commercial spyware 2016-2021. Industrialisation of commercial surveillance vendors 2021-2024.
From Contagious to ClickFake Interview: Lazarus leveraging the ClickFix tactic
Username or Email Address Password Remember Me This post was originally distributed as a private FLINT report to our customers on 21 March 2025. The report detailed findings about the Lazarus ClickFake Interview campaign. In March 2025, Bybit, an UAE-based crypto exchange platform, was targeted by Lazarus, a state-sponsored intrusion set attributed to the Democratic People’s Republic of Korea (DPRK), leading to the theft of $1.5 billion, which represents a record-breaking crypto heist in history.
Cyber threats impacting the financial sector in 2024 - focus on the main actors
This report will dive into cybercrime actors and state-sponsored intrusion sets tracked and documented by Sekoia. As this report is a synthesis of latest 2024 campaigns targeting financial entities, further information on the intrusion sets at the origin of the attacks and mentioned below can be found on the Sekoia.io platform, including a history of their past operations and descriptions of their tactics, techniques and procedures.
A three beats waltz: The ecosystem behind Chinese state-sponsored cyber threats
Username or Email Address Password Remember Me The People’s Liberation Army (PLA), the Ministry of State Security (MSS) and the Ministry of Public Security (MPS) are the three main state actors conducting state-sponsored offensive cyber operations for the interests of the Chinese Communist Party (CCP). From 2021 onward, Sekoia observed that operations attributed to China were mostly linked to the Ministry of State Security (MSS) rather than the People’s Liberation Army (PLA).
Securing Gold : Hunting typosquatted domains during the Olympics
Anticipating Paris 2024 Olympics cyber threats, Sekoia.io has conducted over July and August 2024 a proactive hunting of Olympics-typosquatted domains registered by malicious actors – cybercrime related and possibly APT campaigns – in order to detect any kind of operations though the detection of connexion to typosquatted domains (phishing, C2). This work is complementary to our general assessment of cyber threats on Paris Olympics, published in January 2024.
Master of Puppets: Uncovering the DoppelGänger pro-Russian influence campaign
This report was originally published for our customers on 14 May 2024. The DoppelGänger campaign is an ongoing influence campaign, starting from May 2022 and attributed to the Structura National Technologies (Structura) and the Social Design Agency (SDA), which are two Russian entities. The primary goal of DoppelGänger is to diminish support for Ukraine in the wake of Russian aggression and to foster divisions within nations backing Ukraine.
Guarding Democracy: Assessing Cyber Threats to 2024 Worldwide Elections
In 2024 multiple worldwide elections will be held with 54% of the world population called to vote. Electoral results can potentially influence the geopolitical landscape, making elections a prime target for cyber offensive operations aimed to influence the outcome.
Securing Gold: Assessing Cyber Threats on Paris 2024
The next Olympic Games hosted in Paris will take place from 26 July to 11 August 2024, while the Paralympic Games will be carried out from 28 August to 8 September 2024. The Olympic and Paralympic Games, which bring together all the nations around sport competitions every two years, is a showcase for States in front of the world.
Unmasking the latest trends of the Financial Cyber Threat Landscape
This report aims at depicting recent trends in cyber threats impacting the financial sector worldwide. It focuses on principal tactics, techniques and procedures used by lucrative and state-sponsored intrusion sets by providing an analysis of evolutions observed in campaigns against financial organisations.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Coline
Contact Coline, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack