The Threat CodexApr 30, 2025
TheWizards APT group uses SLAAC spoofing to perform adversary-in-the-middle attacks
#TheWizards #Spellbinder #WizardNet
https://www.welivesecurity.com/en/eset-research/thewizards-apt-group-slaac-spoofing-adversary-in-the-middle-attacks/
TheWizards APT group uses SLAAC spoofing to perform adversary-in-the-middle attacks

ESET researchers publish an analysis of Spellbinder, a lateral movement tool used to perform adversary-in-the-middle attacks.

ESET ResearchApr 30, 2025
#ESETResearch analyzed the toolset of the China-aligned APT group that we have named #TheWizards. It can move laterally on compromised networks by performing adversary-in-the-middle (AitM) attacks to hijack software updates. https://www.welivesecurity.com/en/eset-research/thewizards-apt-group-slaac-spoofing-adversary-in-the-middle-attacks/
Since at least 2022, the group has targeted individuals, companies, and unknown entities in the Philippines, the United Arab Emirates, Cambodia, mainland China, and Hong Kong.
#TheWizards deploy a tool we have named #Spellbinder, which implements IPv6 SLAAC spoofing to redirect IPv6 traffic to the machine running Spellbinder, making it act as a malicious IPv6-capable router.
Spellbinder intercepts DNS queries associated with update domains for Chinese software. We focus on a recent case in which an update of Tencent QQ was hijacked to deploy TheWizards’ signature backdoor, WizardNet.
In our blogpost, we also discuss links we uncovered between #TheWizards and the Chinese company Dianke Network Security Technology, also known as UPSEC.
IoCs available in our GitHub repo: https://github.com/eset/malware-ioc/tree/master/thewizards
TheWizards APT group uses SLAAC spoofing to perform adversary-in-the-middle attacks

ESET researchers publish an analysis of Spellbinder, a lateral movement tool used to perform adversary-in-the-middle attacks.

Metal ReleasesMar 18, 2024

🌿 Wander into THE WIZARDS' "The Exit Garden," blossoming on March 22!

🔮 Experience the magic & support us 👉 [https://amzn.to/3PjmknE]

#metalreleases #TheWizards #HardRock #PsychedelicRock

Discover the gateway to sonic landscapes by downloading our app 🤘https://www.metalreleases.com/

Amazon.com

BunnyGamingNov 29, 2023

'The Wizards - Dark Times: Brotherhood' Now On Quest, Steam, & Viveport

This new launch includes the complete remastered main game of 'The Wizards: Dark Times' along with an additional feature, the Brotherhood Update.

#TheWizards #MetaQuest #Steam #Viveport #VR #VRGames

For IG users: Link in Profile

More at:

https://bunnygaming.com/news/vr-game-the-wizards-dark-times-brotherhood-now-on-quest-steam-viveport/

[VR Game] 'The Wizards - Dark Times: Brotherhood' Now On Quest, Steam, & Viveport

Vertigo Games and Carbon Studio have released 'The Wizards - Dark Times: Brotherhood' on Meta Quest, Steam, and Viveport. This new launch includes the

BunnyGaming.com
GameSense.coJun 7, 2023
Image: Netflix Are you wondering if Black Clover: Sword of the Wizard King is canon and how it relates to the manga and anime series? #TheWizards https://gamesense.co/game/the-wizards/news/discuss/is-black-clover-sword-of-the-wizard-king-canon/
Is Black Clover: Sword Of The Wizard King Canon: The Wizards : Gamesense.co

Image Netflix Are you wondering if Black Clover Sword of the Wizard King is canon and how it relates to the manga and anime series.

TheBeastOfBaglanJan 20, 2020

Aberavon RFC
@AberavonRFC

#TheWizards beat #TheIronmen with a fantastic 'almost' team driving maul in the 7⃣8⃣th minute.

Full report here ⬇️🔴⚫
https://t.co/haln8dDOvd?amp=1

Match Report | Merthyr RFC

This was certainly not a classic, but it was full of hard, determined rugby and brought an exciting finish.

TheBeastOfBaglanDec 22, 2019

Aberavon RFC
@AberavonRFC

#TheWizards🧙‍♂️ get back to winning ways with a 2⃣6⃣ - 1⃣1⃣ victory over
@EVRFC
.

Full match report here ⬇️
https://t.co/MjV7XFjGC4?amp=1

Match Report | Ebbw Vale

<p style=font-size: 14px; background-color: rgba(255, 255, 255, 0.2);>Aberavon ended a run of four losses with their first league win since the second of November and it was enough to jump them back into third spot.</p>

TheBeastOfBaglanNov 16, 2019

Aberavon RFC
@AberavonRFC

#MatchPreview 🎥 | with Hooker Luke Davies.

#TheWizards 🧙‍♂️play Llanelli on Saturday 16 November at the Talbot Athletic Ground, 2.30KO.

#BeAberavon

🔴⚫️
https://twitter.com/i/status/1195053789788684289

Aberavon RFC on Twitter

“#MatchPreview 🎥 | with Hooker Luke Davies. #TheWizards 🧙‍♂️play Llanelli on Saturday 16 November at the Talbot Athletic Ground, 2.30KO. #BeAberavon 🔴⚫️ https://t.co/ZsVzktjqxh”

Twitter
TheBeastOfBaglanNov 3, 2019

Aberavon RFC
@AberavonRFC

🔝 WIN at Sardis Road 🆚
@PontypriddRFC
. 1st WIN at Sardis in 8⃣ seasons and a well deserved win it was.

#TheWizards 🧙‍♂️ 5⃣/5⃣ 🙌 🔴⚫️

🎥 Here is
@AledT10mas
slotting over the winning kick ⬇️

https://twitter.com/i/status/1190669223057600512

Aberavon RFC on Twitter

“🔝 WIN at Sardis Road 🆚 @PontypriddRFC. 1st WIN at Sardis in 8⃣ seasons and a well deserved win it was. #TheWizards 🧙‍♂️ 5⃣/5⃣ 🙌 🔴⚫️ 🎥 Here is @AledT10mas slotting over the winning kick ⬇️ https://t.co/k2SKtH12Vb”

Twitter
TheBeastOfBaglanNov 3, 2019

Aberavon RFC
@AberavonRFC

Opportunist try from #TheWizards 🧙‍♂️🔴⚫️

© skipper
@JTReeves_
capitalising on space left on the blindside.

@PontypriddRFC
15 - 16
@AberavonRFC
. 🎥⬇️

https://twitter.com/i/status/1190723588304846848

Aberavon RFC on Twitter

“Opportunist try from #TheWizards 🧙‍♂️🔴⚫️ © skipper @JTReeves_ capitalising on space left on the blindside. @PontypriddRFC 15 - 16 @AberavonRFC. 🎥⬇️ https://t.co/ryHNoelbEt”

Twitter