ذكاء التهديدات

A new critical authentication bypass vulnerability affecting the web admin console for FortiOS and FortiProxy. Threat actors can easily exploit the vulnerability with a crafted HTTP request.

CloudSEK Threat Intelligence Advisory on file-locking trojan Fappy spread via phishing campaigns, untrustworthy download sources, etc.

A post on a cybercrime forum is advertising ready-made phishing projects targeting LastPass and Evernote users for USD 2,500 on monthly rental subscription

Chinese hacker groups and APT groups adhere to phishing, spear-phishing attack vectors against Indian companies, to carry out large volumes of scanning.

CloudSEK XVigil discovered a poster, on a database marketplace, advertising 100,000 Santander Mexican customers' data for $250 in BTC

CloudSEK researchers reveal the names of users who dumped the data and the timestamps of the files that confirms the data is old.

In a grave attempt to target the Indian Tax Office, a scammer, Bassterlord, sells access to its network and advertises the sensitive data gathered.

Generaly, a new OTP bot setup capable of capturing OTP, Card CVV, pin codes, and recordings of the spoofed calls. The bot has a dedicated Telegram channel to capture & display information.