OSINT Updates for November 8, 2024
https://twitter.com/Unit42_Intel/status/1854550444778881160 https://twitter.com/RakeshKrish12/status/1854775107371028965 https://twitter.com/P4nd3m1cb0y/status/1854661858491302139 https://twitter.com/Gootloader/status/1854533704057594108 https://twitter.com/KrakenLabs_Team/status/1854476333759271105
Understanding the DuckTail Threat Actor’s Recent Attacks on Middle East
CategoryDetailsThreat ActorsDuckTail (Vietnam-based)Campaign OverviewTargeting digital marketing firms, primarily in the Middle East, using phishing, social…
North Korea allegedly targeting crypto businesses with Mac-focused malware
CategoryDetailsThreat ActorsBlueNoroff, a subgroup of Lazarus, attributed to North Korea's Reconnaissance General Bureau (RGB).Campaign Overview"Hidden…
HrServ – Previously unknown web shell used in APT attack
CategoryDetailsThreat ActorsUnknown threat actor; possibly a non-native English speaker; potential connection to Traditional Chinese language…
Threat actors use copyright infringement phishing lure to deploy infostealers
Category Details Threat Actors Unknown actor targeting Facebook business and advertising account users in Taiwan.…
Unwrapping the emerging Interlock ransomware attack
Category Details Threat Actors Interlock Ransomware Group, possibly emerged from Rhysida Ransomware operators Campaign Overview…
Threat actor abuses Gophish to deliver new PowerRAT and DCRAT
Category Details Threat Actors Unknown threat actor Campaign Overview Phishing campaign using Gophish toolkit; delivers…
China-linked hackers tasked with Japanese targets pursue them through Europe
Category Details Threat Actors MirrorFace, a China-linked hacking group. Campaign Overview Expansion of operations to…
OSINT Investigation: Hunting Malicious Infrastructure Linked to Transparent Tribe
Category Details Threat Actors Transparent Tribe (APT36), Pakistan-based, active since at least 2013. Known for…