Threat Intelligence

Advanced Phishing Campaign Targeting Individuals & Businesses in the Middle East (Part 2)

CloudSEK’s contextual AI digital risk platform has uncovered a large-scale ongoing BEC scam that is targeting vendors of Middle East-based organizations and individuals.

November 28, 2022

Exibir postagem

Inteligência de ameaças

Unauthenticated Confluence RCE Vulnerability (CVE-2022-26134) Actively Exploited in the Wild

CVE-2022-26314 is an unauthenticated and remote OGNL injection vulnerability that could lead to remote code execution.

June 13, 2022

Exibir postagem

Phishing

3.4M LiveAuctioneers users’ PII and cracked passwords for sale on data sharing forum

Unauthorized third party accessed user data of the online bidding, auctioning forum, through a security breach, confirmed by LiveAuctioneers in a statement.

July 13, 2020

Exibir postagem

Inteligência do adversário

Dark web marketplace sells Iranian, Indian official websites’ databases

Hacker group and dark web marketplace CRYP70N1C0D3 hacks and sells the databases of official websites, and hires more hackers to do the same.

April 9, 2020

Exibir postagem

Malware Intelligence

Raccoon Stealer Malware Threat Intel Advisory

Raccoon Stealer that appeared in 2019 for the first time is still an ongoing threat, and targets users’ sensitive data including login credentials.

May 10, 2021

Exibir postagem

Breach

1 million IRCTC users’ PII resurfaces on data sharing forum

CloudSEK Threat Intelligence has detected a data leak that contains sensitive information of 1 million IRCTC (Indian Railway Catering and Tourism Corporation) users.

October 14, 2020

Exibir postagem

Malware Intelligence

Prynt Stealer Source Code Shared over Cybercrime Forum

Prynt Stealer operating on stealth mode to steal sensitive data & credentials from the victims’ systems, browsers, & crypto wallets.

November 2, 2022

Exibir postagem

Inteligência do adversário

Cybercriminals Offer Malvertisement-as-a-Service by Abusing Google Ads

Increase in supply and demand for services that are abusing Google Ads to deliver malware payloads and loaders, across various dark web and cybercrime forums.

May 20, 2022

Exibir postagem