Inteligência de ameaças

XVigil identified a post, advertising 170 SonicVPN accesses for USD 2,000. Threat actors have been targeting SonicVPN frequently, which puts these accesses at a high risk of being exploited.

Our Research team analysed the profile of the ransomware group dubbed BlackCat. This group doesn’t have an online presence apart from an exclusive Onion site, where they post their activities, updates, and targeted victims.

CloudSEK team identified a post on a cybercrime forum where a threat actor posted the database of Rail Coach Factory, Kapurthala, India for free.

CloudSEK threat intelligence advisory on Carbanak/ FIN7 threat group, targets banks for espionage, data exfiltration, using Carbanak malware.

CloudSEK’s contextual AI digital risk platform XVigil discovered a financially motivated ransomware group, dubbed BlueSky, speculated to be connected to the Conti ransomware group.

A security researcher reported a vulnerability in the Azure Cosmos DB Jupyter Notebook instance, referred to as ChaosDB, that allows a user to gain access to another user’s data.

The leaked database contains sensitive information, such as name, mobile number, address, user ID among other details, of registered IndiaMart suppliers.

CloudSEK Threat Intelligence Advisory on LokiBot Trojan, an infostealer and keylogger malware strain delivered via MS Office documents.