Threat Intelligence

CloudSEK threat intelligence advisory on DoppelPaymer ransomware gang, operated by financially motivated threat group TA505.

CloudSEK Threat Intelligence Advisory on ProLock Ransomware, previously PwndLocker malware, Mitre ATT&CK, IOCs, and preventive measures.

CloudSEK’s Threat Intelligence team has uncovered a cybercrime forum post, where an analysis of the recently disclosed CVE-2023-21752 was provided by a threat actor with a medium reputation

DragonForce Malaysia has shared an exploit to bypass the Windows Server LPE LDR for targeting and exploiting Indian servers. The group has also shared a working PoC (Proof of Concept) video to substantiate their claims.

CloudSEK researchers discover a magnet link to an archive that contains Intel's internal data, including release notes, NDA agreements, etc.

CloudSEK’s contextual AI digital risk platform XVigil discovered a financially motivated ransomware group, dubbed Faust, a variant of the Phobos ransomware family. The group encrypts victims’ files with a ‘.faust’ extension.

Domains claiming to wipe out COVID-related malware delivers BlackNet RAT. Criminals rent out VPS services to host malicious campaigns.

CloudSEK’s flagship digital risk monitoring platform XVigil discovered a post, on a Russian cybercrime forum frequented by Ransomware groups, regarding eight vulnerabilities targeting Samba packages affecting Active Directory domains.