A Türkiye-backed cyberespionage group exploited a zero-day vulnerability in Output Messenger, targeting users linked to the Kurdish military in Iraq. The attackers compromised the server, stole sensitive data, accessed user communications, impersonated users, and disrupted operations. This attack signals an increase in the group's technical sophistication and urgency in their operational goals.
TPRM report: https://scoringcyber.rankiteo.com/company/larksuite
"id": "lar921051325",
"linkid": "larksuite",
"type": "Cyber Attack",
"date": "5/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"