Threat Intelligence

CloudSEK Threat Intelligence Advisory on file-locking trojan Fappy spread via phishing campaigns, untrustworthy download sources, etc.

CloudSEK’s AI powered Digital Risk Protection (DRP) Platform identified a Twitter account involved in a new type of phishing scam campaign where the threat actor is misusing Zoho Forms to steal information from banking customers.

CloudSEK researchers discovered a post on a database sharing platform advertising the name, number, PII of BPSSC Police exam candidates.

CloudSEK threat intelligence advisory on Bouncy Castle authentication bypass flaw, CVE-2020-28052, allows attackers to evade password checks.

Yet another attempt to cash in on the fears of Coronavirus, with COVID-themed phishing. Zeus Sphynx targets banks, delivers malicious email attachments.

16 million user PII records compromised from India’s Swachhata Platform. Leaked data contains email and password combos.

Generaly, a new OTP bot setup capable of capturing OTP, Card CVV, pin codes, and recordings of the spoofed calls. The bot has a dedicated Telegram channel to capture & display information.

A post on a cybercrime forum is advertising a service allegedly claimed that it can embed documents with any malicious executables.