Threat Intelligence

CloudSEK’s Threat Intelligence Research team analyzed the profile of the ransomware group named 54bb47h (Sabbath)

Category: Vulnerability Intelligence Vulnerability Class: Remote code execution CVE ID: To be assigned CVSS:3.0 Score: To be assigned Spring4Shell – Executive Summary A new critical zero-day vulnerability in the popular Spring framework for Java came into the spotlight when its exploit was first published by a Chinese security researcher “heige” on Twitter (@80vul). Later it was confirmed that a […]

CloudSEK Threat Intelligence Advisory on AHP ransomware, latest version of Dharma virus, that targets Wndows-based systems.

XVigil discovered a threat actor advertising a macro RAT (Remote Access Trojan) dubbed “Ekipa", created by Russian hacktivists.

HEH is an IoT P2P botnet written in GO language that wipes data from infected systems. Learn about Mitigation, Impact and IOCs of HEH Botnet.

CloudSEK threat intelligence advisory on UNC2452 compromised a module in the SolarWinds Orion IT monitoring and management system.

Web shell access to Zimbra powered Webmail service of Bamboozle shared over cybercrime forum. Possible ZCS vulnerability exploited to gain access.

Despite the recent spike in phishing campaigns, malware attacks, and data leaks, a recent study of leaked credentials found that 1 out of every 142 passwords is not strong enough.