Threat Spotlight: WarmCookie/BadSpace
CategoryDetailsThreat ActorsTA866 (also known as Asylum Ambuscade)Campaign OverviewWarmCookie is distributed through malspam and malvertising campaigns…
Analysis of the Crypt Ghouls group: continuing the investigation into a series of attacks on Russia
CategoryDetailsThreat ActorsCrypt GhoulsCampaign OverviewTargeted Russian businesses and government agencies with ransomware.Target Regions (Or Victims)Russian businesses…
UAT-5647 targets Ukrainian and Polish entities with RomCom malware variants
CategoryDetailsThreat ActorsUAT-5647 (also known as RomCom) - Russian-speaking groupCampaign OverviewActive since late 2023, targeting Ukrainian…
-
Guest - Ransomware
- November 24, 2024
Royal Mail Lures Deliver Open Source Prince Ransomware
CategoryDetailsThreat ActorsUnknown, likely using the Prince ransomware builder from GitHub.Campaign OverviewRansomware campaign impersonating Royal Mail,…
BlindEagle flying high in Latin America
CategoryDetailsThreat ActorsBlindEagle (APT-C-36)Campaign OverviewTargeting entities in Latin America (primarily Colombia) with espionage and financial attacks.Target…
CloudSorcerer – A new APT targeting Russian government entities
CategoryDetailsThreat ActorsCloudSorcererCampaign OverviewAdvanced persistent threat (APT) targeting Russian government entities, primarily for cyber espionage.Target Regions…
LightSpy: APT41 Deploys Advanced DeepData Framework In Targeted Southern Asia Espionage Campaign
CategoryDetailsThreat ActorsAPT41, Chinese cyber-espionage group, also known as Double DragonCampaign OverviewEvolution of LightSpy malware with…
-
Guest
- Cyber Updates
- November 24, 2024
OSINT Updates for November 24 , 2024
https://twitter.com/officer_cia/status/1860507851195609273 https://twitter.com/RedPacketSec/status/1860564662917501120 https://twitter.com/RedPacketSec/status/1860561745145713112 https://twitter.com/RedPacketSec/status/1860564664167408058 https://twitter.com/SpyCollection1/status/1860577641645957138 https://twitter.com/RedPacketSec/status/1860561734571892904 https://twitter.com/RedPacketSec/status/1860564667791258032 https://twitter.com/RedPacketSec/status/1860561743933554774
TTP Today Fraud & Intelligence Insights Report Q1-Q3 2024
CategoryDetailsThreat ActorsFraudsters targeting high-demand sectors using advanced techniques like BIN testing, OTP spoofing, SIM swapping,…
Dark Web Profile: Moonstone Sleet
CategoryDetailsThreat ActorsMoonstone Sleet (aka Storm-1789), a North Korean state-sponsored APT group.Campaign OverviewActive since early 2024,…
