Whitepapers and Reports

In 2022, CloudSEK’s TRIAD identified several incidents, especially targeting banking customers, and released advisories to inform the affected SaaS companies and the public. As this trend continues, we recommend that SaaS companies and consumers stay alert to these tactics in 2023 as well.

XVigil’s Fake Customer Care Number module scours the internet for fake customer care numbers. In this report, CloudSEK researchers have analyzed a sample of ~20,000 Indian mobile numbers used by threat actors, to run such customer care scams.

CloudSEK’s BeVigil, the world’s first security search engine for mobile apps, uncovered a critical security flaw in the mobile app industry.

XVigil’s Underground Intelligence module records and reports the ongoing criminal activity from various underground forums. The data collected in 2021 and 2022 contained some very interesting patterns in the activity of threat actors. CloudSEK’s TRIAD was able to identify the following drastic changes in the recorded patterns.

CloudSEK has identified an increase in cyber threats targeting the banking sector in 2022, as compared to the same period in 2021.

In this report, we delve into how threat actors use reverse tunnel services, along with URL shorteners, to orchestrate widespread campaigns, without leaving any traces.