Threat Intelligence

The vulnerability tracked as CVE-2021-41773 is a path traversal and file disclosure vulnerability in Apache HTTP Server. The vulnerability has been exploited in the wild as a zero-day.

We have discovered that the PowerExchange Backdoor is targeting Microsoft Exchange Servers and a Custom-made Powershell backdoor deployed on an unidentified UAE government entity.

Spyier claims to be the most popular spying solution that can hack an iPhone within minutes. Even the most secure Telegram chats are hackable.

CloudSEK team has identified Stormous ransomware campaigns targeting multiple organizations globally. The threat group is financially motivated and their latest chain of attacks has been directed at Indian entities as well.

Category: Malware Intelligence Type/Family: Botnet Industry: Finance & Banking Region: Global Source*: C3 Executive Summary THREAT IMPACT MITIGATION Apollo OTP bot advertised on the cybercrime forum. Discord-based bot capable of making spoofed calls using Google Voice. Captured OTP can be used to bypass 2FA and gain complete access to bank accounts. Implement bot-detection technologies and […]

Desorden announces a cyberattack against Indonesia’s PT Jasamarga Tollway Operator. 252 GB data was exfiltrated from 5 servers.

CloudSEK's contextual AI digital risk platform XVigil has discovered a post on an English speaking cybercrime forum, sharing a database of PHI-IIIT Delhi for Forum credits. A total of 82 Databases were compromised and leaked data.

CloudSEK threat intelligence advisory on CobaltStrike threat group, new attack vectors they exploit, TTPs, IOCs, their impact and mitigation.