Inteligência de ameaças

CloudSEK threat intelligence advisory on Bouncy Castle authentication bypass flaw, CVE-2020-28052, allows attackers to evade password checks.

Yet another attempt to cash in on the fears of Coronavirus, with COVID-themed phishing. Zeus Sphynx targets banks, delivers malicious email attachments.

16 million user PII records compromised from India’s Swachhata Platform. Leaked data contains email and password combos.

Generaly, a new OTP bot setup capable of capturing OTP, Card CVV, pin codes, and recordings of the spoofed calls. The bot has a dedicated Telegram channel to capture & display information.

A post on a cybercrime forum is advertising a service allegedly claimed that it can embed documents with any malicious executables.

CloudSEK Threat Intelligence Advisory on Cerberus Android banking Trojan, source code for which is released on underground forums for free.

CloudSEK threat intelligence advisory on Xanthe cryptomining botnet that targets Linux systems, compromises misconfigured Docker server APIs.

CloudSEK threat intelligence advisory on Anubis Android banking trojan that lures its victims through malicious applications.