Inteligência de ameaças

CloudSEK Threat Intelligence Advisory on Git LFS RCE vulnerability, allowing the attacker to exploit target app leading to ACE on the victim.

CloudSEK’s Threat Intelligence team discovered a post, on a cybercrime forum, advertising a scanning tool for the path traversal and file disclosure vulnerability, CVE-2021-41773, in Apache HTTP Server.

We have identified an increase in dark web discussions among threat actors, regarding CRM exploitation tactics and exposure of CRM credentials across code repositories such as Github and Bitbucket

CloudSEK threat intelligence advisory on North Korean state-sponsored threat group APT38, whose primary target is the financial sector.

CloudSEK researchers’ investigation discovered that the CoinEgg Scam/cryptocurrency scam was conducted by threat actors. We discovered an on-going malicious scheme involving multiple payment gateway domains and Android-based applications, used to lure unsuspecting individuals into a mass gambling scam.

CloudSEK Threat Intelligence Advisory on file-locking trojan Fappy spread via phishing campaigns, untrustworthy download sources, etc.

CloudSEK’s AI powered Digital Risk Protection (DRP) Platform identified a Twitter account involved in a new type of phishing scam campaign where the threat actor is misusing Zoho Forms to steal information from banking customers.

CloudSEK researchers discovered a post on a database sharing platform advertising the name, number, PII of BPSSC Police exam candidates.