Threat Intelligence

CloudSEK SVigil team’s research found 101 compromised apps with SpinOK Android malware distributed as an advertisement SDK. More worryingly, 43 of these apps are still active on the Play Store, some with 5+ million downloads.

XVigil discovered 8 posts on a database marketplace advertising multiple Chinese govt. and private databases, exposing 1.5B Chinese records.

CloudSEK threat intelligence advisory on Osiris banking trojan, the latest variant of Kronos malware, targets banking credentials of victims.

Hostinger’s preview domain feature abused to host phishing sites

SiegedSec claims to have exposed unclassified documents for NATO’s COI Cooperation Portal which is NATO's unclassified information-sharing and collaboration environment.The leak consists of 845 MB of compressed data.

Apache Unomi, a Java Open Source platform designed to provide personalized customer experience had a Critical RCE vulnerability.

Portmap.io was misused in a phishing campaign targeting Indian banking customers. Phishing URLs are distributed via smishing techniques.

CloudSEK Threat Intelligence Advisory on Fonix Ransomware as a Service, distributed via malvertising campaign, software updates, spam emails.