Threat Intelligence

CloudSEK Threat Intelligence Advisory on Citrix ADC RCE vulnerability tracked as CVE-2019-19781, rated as critical with a CVSS score of 9.8

Several forum members have shown interest to procure the data that is being sold for $500. The data could be used to blackmail law enforcement officials.

CloudSEK’s Customer Threat Research Team discovered a malware sample in the wild (ITW) that targeted the customers of Indian Banks.

RaidForums VIP user VOW leaks sensitive information of as many as 199 credit card customers as a sample and claims to have details of over 320k customers.

CloudSEK’s flagship digital risk monitoring platform XVigil discovered a post, on a surface web database marketplace, advertising the information of 16.99 million unique CouchSurfing users.

Log4J vulnerability is now being exploited by notorious ransomware groups such as Khonsari and Conti. Log4Shell had 3 high priority security patches in the last week alone, leading to increased threat severity.

DragonForce has been actively targeting Indian entities under #OpsPatuk and #OpsIndia. Breach of some sensitive Government websites containing PII, military operations, and other government secrets.

Researchers at CloudSEK’s Threat Intelligence Team came across a malware strain dubbed ‘Swiftslicer’ linked with APT SandWorm.