Inteligência de ameaças

Businesses use SMS, email to authenticate transactions, send payment reminders, etc. And, crooks are taking advantage of this.

Russian hacking forum user insists that he has Admin access to Indian State Tax office's network, granting access to all connected devices, state documents.

Here is the breakdown of the facts and myths, in the much hyped report, which claims that an unsecured S3 bucket exposed BHIM user data.

Multiple phishing domains impersonating Absher, the Saudi government service portal. Domains provide fake services to the citizens and steal their credentials.

CloudSEK XVigil discovered a poster, on a database marketplace, advertising 100,000 Santander Mexican customers' data for $250 in BTC

Critical RCE vulnerability affecting Citrix ADC and Citrix Gateway. APT 5 has been observed exploiting this vulnerability in the wild as per Citrix and NSA. Threat actors on the cybercrime forums were looking to buy the exploits for this vulnerability to perform arbitrary code execution.

CloudSEK Threat Intelligence Advisory on Zumanek Trojan, malware variant that hijacks bank accounts and steals crypto wallet credentials.

CloudSEK discovered a threat actor group named SolidBit, offering RaaS (Ransom-as-a-Service) on an underground forum. The group is actively looking for partners to gain access to companies’ private networks in order to spread the ransomware called SolidBit.