Inteligência de ameaças

The email orders organizations to review the attachment and submit their plan of action to combat Coronavirus, much similar to APT36's pattern of attack.

BlackMatter ransomware operators claim that it combines the best aspects of REvil, Darkside, and Lockbit ransomware. They target a variety of industries with revenue higher than USD 1 million, with the exception of organizations in the healthcare, government, oil and gas, and non-profit sectors.

CloudSEK threat intelligence advisory on VMware vCenter RCE Bug, allows unauthorized actors to execute arbitrary code on a vCenter Server instance.

CloudSEK Threat Intelligence Advisory on Firestarter, created by DoNot APT, Android malware that abuses Google's Firebase Cloud Messaging

Nordic Market, a new dark web drugs marketplace hosted on Microsoft IIS server, sells Cannabis, Hashish, Weed, among other drugs.

A stress testing service for simulating DDoS attacks on websites and servers. Threat actors can misuse such DDoS-for-hire services to target domains using unauthorized attacks.

With a malicious intent to attack financial institutions, attackers deliver Crimson RAT via email attachments and links shared through phishing emails.

The hacker group displays a message, on the website, directed to its members. The message claims that the group's administrator, S1ege, hacked the site