Inteligência de ameaças

CloudSEK threat intelligence advisory on Zebrocy, group that supports APT groups like Sofacy, masquerades as the latest research on COVID-19.

CloudSEK’s Threat Intelligence Team discovered an URL, wherein an open redirection vulnerability was exploited to direct the victim to a login page of an entity belonging to the government of Qatar.

In a grave attempt to target the Indian Tax Office, a scammer, Bassterlord, sells access to its network and advertises the sensitive data gathered.

CloudSEK threat intelligence advisory on Gootloader malware, Javascript-based infection framework, uses new techniques to deliver payload.

CloudSEK threat intelligence advisory on AridViper that drops Python-based Windows malware PyMicropsia, info-stealer with other capabilities.

A post on a cybercrime forum is advertising ready-made phishing projects targeting LastPass and Evernote users for USD 2,500 on monthly rental subscription

Chinese hacker groups and APT groups adhere to phishing, spear-phishing attack vectors against Indian companies, to carry out large volumes of scanning.

Internal ticketing tool Atlassian JIRA's unsecured service desks were publicly exposed, allowing attackers to raise internal tickets for multiple departments.