Threat Intelligence

CloudSEK’s contextual AI digital risk platform XVigil discovered a number of companies being targeted by a ransomware group named Cl0p recently.

An unauthorized information disclosure vulnerability that allowed threat actors to access the customer data on the registration page of Akasa Air (akasaair[.]com)

AutoWarp vulnerability in the Azure Automation service that allows unauthorized access to other Azure customer accounts.

XVigil has identified a surge in phishing sites hosted using reverse tunnel services. In this report, we delve into how threat actors use reverse tunnel services, along with URL shorteners, to orchestrate widespread campaigns, without leaving any traces.

CloudSEK Threat Intelligence Advisory on Windows SMBv3 RCE, tracked as CVE-2020-0796, rated as critical with a CVSS score of 9.0.

CloudSEK’s contextual AI digital risk platform XVigil has identified an increase in instances of organizations exposing Swagger user interfaces. Many of these instances have high exploitability risks.

VenomRAT is a remote access tool discovered by 2020, and it is used by threat actors to control the infected systems remotely.

CloudSEK researchers verified leaked data sample that the threat actor shared, discovered that the sample contained data from 111 countries.