ذكاء التهديدات

CloudSEK threat intelligence advisory on IcedID Banking Trojan Malware that steals financial information. It also acts as a dropper for other malware.

CloudSEK Threat Intelligence Advisory on LokiBot Trojan, an infostealer and keylogger malware strain delivered via MS Office documents.

CloudSEK threat intelligence advisory on Carbanak/ FIN7 threat group, targets banks for espionage, data exfiltration, using Carbanak malware.

CloudSEK Threat Intelligence has detected a data leak that contains sensitive information of 1 million IRCTC (Indian Railway Catering and Tourism Corporation) users.

CloudSEK’s contextual AI digital risk platform XVigil, discovered a threat actor group named Team Mysterious Bangladesh who claimed to have compromised the CBHE Delhi, India. The group mentioned leaking information about students from 2004 to 2022.

CloudSEK Threat Intelligence Advisory on SunCrypt ransomware, new member of the Maze ransomware cartel, adopts attack techniques from Maze.

We are unearthing the scale and scope of cyber threats targeting oil and energy companies across the world. This might be a Russian state-sponsored cyberattack on the Energy Sectors of their competitors.

Recently, our research team discovered an interesting post, on a Russian-language cybercrime forum, of a threat actor advertising a phishing toolkit. In the actor’s first post related to the phishing service, they were only selling monthly subscription packages. However, through a reliable source, we have gathered other details about this phishing campaign, including the tactics, techniques, and procedures (TTPs) used.