ذكاء التهديدات

Chinese hacker groups and APT groups adhere to phishing, spear-phishing attack vectors against Indian companies, to carry out large volumes of scanning.

CloudSEK XVigil discovered a poster, on a database marketplace, advertising 100,000 Santander Mexican customers' data for $250 in BTC

CloudSEK researchers reveal the names of users who dumped the data and the timestamps of the files that confirms the data is old.

In a grave attempt to target the Indian Tax Office, a scammer, Bassterlord, sells access to its network and advertises the sensitive data gathered.

Generaly, a new OTP bot setup capable of capturing OTP, Card CVV, pin codes, and recordings of the spoofed calls. The bot has a dedicated Telegram channel to capture & display information.

CloudSEK discovered a threat actor group named SolidBit, offering RaaS (Ransom-as-a-Service) on an underground forum. The group is actively looking for partners to gain access to companies’ private networks in order to spread the ransomware called SolidBit.

CloudSEK threat intelligence advisory on North Korean state-sponsored threat group APT38, whose primary target is the financial sector.

CloudSEK threat intelligence advisory on AridViper that drops Python-based Windows malware PyMicropsia, info-stealer with other capabilities.