Threat Intelligence

Team Mysterious Bangladesh announces another wave of attack Group compromised multiple Indian entities in the past. DDoS & Defacement attacks are amongst the most prominent attacks.

XVigil discovered a threat actor advertising a “battle-tested” reverse proxy/PHP phishing app called “NakedPages”, on a cybercrime forum.

We discovered that Gimmick MacOS malware communicates only through their C2 server hosted on Google Drive. The malware was discovered in the first week of May and it has been actively targeting macOS devices

The fake Jio message is linked to a shared Android Package file which when executed, generates ad revenue, gains access to contacts.

Private crypting services offer strong protection and obfuscation. Any malicious tool can be encrypted to avoid detection by antivirus software or reverse engineering.

XVigil discovered a new operation named #OpBRICS launched by the threat actor group Your Data is Ours (YDIO) against the following five major emerging economies:

CloudSEK Threat Intelligence Advisory on SunCrypt ransomware, new member of the Maze ransomware cartel, adopts attack techniques from Maze.

We are unearthing the scale and scope of cyber threats targeting oil and energy companies across the world. This might be a Russian state-sponsored cyberattack on the Energy Sectors of their competitors.