Two sentences: Cyber threat actors use multistage attacks and LOLBins to evade detection while delivering XWorm via WebDAV-enabled infrastructure, with BATLoader and VBScript stages helping drop and execute payloads. The campaign centers on XWorm’s versatility…
Avast Threat Labs examines how the newly popular .zip top-level domain is being abused to mislead users into thinking they are downloading files, with many examples mimicking major brands like Microsoft, Google, and Amazon. The piece also details how attackers…
Cado Security Labs describe P2Pinfect, a Rust-based botnet targeting publicly-accessible Redis deployments with cross‑platform Linux and Windows payloads. The malware propagates via Redis replication and module loading, then uses a peer‑to‑peer C2 network, def…
Halcyon researchers expose Command-and-Control Providers (C2Ps) as a key pillar of the ransomware economy, offering services to attackers while presenting themselves as legitimate businesses. The report links Cloudzy as a common service provider used by actors…
Two sentences summarizing the content: The article references a CISA advisory about threat actors exploiting Ivanti EPMM vulnerabilities. It notes the presence of IOCs (file hashes) associated with the activity and suggests mitigation guidance from CISA. Hasht…
A new and more dangerous variant of SkidMap was observed targeting unsecured Redis NO AUTH instances, featuring dual Linux infection paths (Debian/Ubuntu and RedHat/CentOS) and a sophisticated multi-stage payload chain including dropper delivery, backdoor inst…
Microsoft Threat Intelligence has identified highly targeted social engineering attacks using credential theft phishing lures sent as Microsoft Teams chats by the threat actor that Microsoft tracks as Midnight Blizzard (previously tracked as NOBELIUM). This la…
Brand impersonation has surged as a core concern, with attackers impersonating trusted brands to steal credentials and deliver malware across platforms. The piece highlights new tooling (VirusTotal NetIoc) and practical hunting approaches to detect and track t…
This report is a summary of threat activity linked to the Russian advanced persistent threat (APT) group BlueBravo (APT29, Midnight Blizzard) uncovered since January 2023.
For the past few years, hackers have increasingly targeted customers and
businesses with tainted software boosted via ads. The recipe is simple –
cyber-criminal groups set up fake websites for high-interest software and
promote them on top of the results page through advertisements.
It takes just one search and one click for a user to fall victim to the trick.
Testament to that is the series of attacks against prominent crypto-currency
figures earlier in 2023 as well as a recent spate of incid
Victim: INDIKA ENERGY GLOBAL Country : ID Actor: alphv Source: http://alphvmmm27o3abo3r2mlmjrpdmzle3rykajqc5xsj7j7ejksbpsa36ad.onion/18fc5669-26a8-4cc4-8152-276f55c28000 Discovered: 2023-07-26 15:49:29.306461 Description: Over 15 Indonesian companies were hacked….
Who is FajarPaper PT Fajar Surya Wisesa Tbk (FajarPaper) is a leading packaging paper manufacturer in Indonesia with an installed capacity over 1.5 million tons per year combined and a range of products which include Kraft Liner Board (KLB) and Corrugated Medium Paper (CMP) for carton-box packaging and Coated Duplex Board (CDB) for display packaging. FajarPaper was established as a limited liability company under the laws of Indonesia on February 29, 1988. FajarPaper has been listed on the Jakarta Stock Exchange since December 19, 1994. (FASW.JK). FajarPaper is a company of the future in terms of its forward-thinking approach to business, energy conservation and the environment. Not only does every FajarPaper product begin its life from recycled paper but also the company’s paper machines are powered by self-sufficient power plants. Headquarters: 30 Jln Abdul Muis, Jakarta Pusat, 10160, Indonesia Phone Number: +62 213441316 Website: www.fajarpaper.com Stock Symbol: FASW Linkedin: http://www.linkedin.com/company/fajar-surya-wisesa-tbk-pt
Data: http://i4utqt3qnrm2hxhvitunmj4b7777svzbzrc4ewig6j4g6g5zzqahz2qd.onion Badan Operasi Bersama Pt Bumi Siak Pusako Pertamina Hulu is a company that operates in the Retail industry. It employs 251-500 people and has $50M-$100M of revenue. The company is headquartered in Jakarta, Jakarta, Indonesia bobcpp.co.id Address:Menara Bank Danamon, 20 flrJl. Prof. Satrio – Mega Kuningan, Jakarta, Jakarta 12950, ID Category:il and Gas, Oil & Gas Exploration & Services, Energy, Utilities & Waste Treatment Web Rank: 18 Million SIC: 59, 594 NAICS: 45,453210
RomCom RAT campaigns—likely a nation-state or linked actor—have been highly active since early 2022, targeting Ukraine-related figures and NATO-related events while evolving tactics to evade detection. The report provides behavioral detection tips, Sigma rules…
During a proactive hunt for mobile malware, SophosX-Ops researchers uncovered four credential-harvesting Android apps targeting Iranian bank customers, using a possibly stolen code-signing certificate and various evasion tricks. The campaign employed unusual C…