Read all Blogs from this Author
Over the past decade, the English-speaking cybercriminal ecosystem commonly referred to as “The COM” has undergone a profound transformation. What began as a niche subculture centered on the trading of what is called “OG Usernames (original gangster)”
CloudSEK uncovered an advanced cryptojacking campaign by threat actor TA-NATALSTATUS, active since 2020 and now escalating globally in 2025. The group exploits exposed Redis servers in the US, Europe, Russia, India, and beyond, hijacking root access to install miners, disable defenses, and wipe out rivals. Their stealth tactics—binary hijacking, obfuscation, and persistence mechanisms—turn servers into long-term mining assets. CloudSEK advises immediate remediation, reimaging, and securing Redis instances.
Read all Whitepapers and reports from this Author
Fraudsters exploit social media to lure investors into fake investment groups, impersonating financial experts & promising high returns. This report exposes their tactics targeting India & global countries.
Read More.png)
Discover how CloudSEK's Threat Intelligence team exposed a critical flaw in India's banking system, exploited by Chinese hackers for a vast money laundering operation using "money mule" accounts, and the malicious APK at the heart of this scheme.
Read MoreRead all knowledge base articles from this Author