Threat Intelligence

CloudSEK’s uncovered yet another improvised modus operandi used by threat actors to target banking customers in India through a phishing campaign.

CloudSEK threat intelligence advisory on Exchange ProxyLogon flaws CVE-2021-26855/ 26857/ 26858/ 27065 exploited by ransomware gangs and nation-state actors.

New phishing-as-a-service platform named “Caffeine”, used to conduct phishing campaigns.

Beware of malicious email attachments, downloads! A new COVID-themed malware disables Windows Task Manager, UAC, reboots the system, and overwrites the MBR.

Researchers at CloudSEK observed a series of threats and potentially malicious campaigns ahead of Black Friday 2022.

CloudSEK threat intelligence advisory on CVE-2021-1732 zero-day vulnerability that targets Windows infrastructure.

CVE-2023-42027 IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multi platforms 8.1, 8.2, 9.1 are vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts

CloudSEK Threat Intelligence Research team's analysis of the ransomware group dubbed Arvin Club