Cybersecurity researchers have identified a new campaign targeting PHP-based web servers, particularly those running the Moodle learning management system in Indonesia, to promote gambling platforms. The attacks involve Python-based bots deploying the GSocket tool to establish persistent communicati…
Tag: INDONESIA
Summary: Cybersecurity researchers have uncovered a campaign targeting PHP-based web servers to promote gambling sites in Indonesia, utilizing Python-based bots for exploitation. The attacks leverage GSocket to establish communication channels and redirect users searching for gambling services to ma…
In recent months, Indonesia has found itself at the center of two significant global cyber threats, highlighting the growing sophistication and reach of state-sponsored and financially motivated hacking groups. These incidents underscore the importance of cybersecurity vigilance in the face of incre…
Summary: The Lazarus Group, linked to North Korea, has launched a new cyber attack campaign known as Operation 99, targeting software developers in the Web3 and cryptocurrency sectors. The campaign employs fake recruiters on platforms like LinkedIn to lure victims into cloning malicious GitLab repos…
Summary: The U.S. Department of Justice announced a successful operation by the FBI to remove PlugX malware from over 4,250 infected computers, linked to the Mustang Panda hacking group associated with China. This operation is part of a broader effort to combat state-sponsored cyber threats targetin…
Summary: A new report from Arctic Wolf Labs reveals a campaign targeting Fortinet FortiGate firewalls, where threat actors exploited vulnerabilities to manipulate configurations and gain unauthorized access. The campaign, observed between November and December 2024, involved multiple phases of explo…
Summary: The FBI and DOJ have successfully removed PlugX malware from thousands of U.S. computers, attributed to the Chinese state-backed hacking group Mustang Panda. This operation highlights the ongoing cybersecurity threats posed by state-sponsored actors and the collaborative efforts of internat…
Summary: The U.S. Department of Justice announced the FBI’s successful deletion of Chinese PlugX malware from over 4,200 infected computers across the United States, part of a global takedown operation. The malware, linked to the Mustang Panda group, had been used for cyber espionage against various…
Attacker: D0R4H4X0R Team: Manado Cyber Team url: kjp.jakarta.go.id/public/listP… Xsec: zone-xsec.com/mirror/id/702497…
(simantar.sumbawabaratkab.go.id…) Attacker: ./FreedomXploit Team: MINIONS CYBER CRIME URL: perpustakaanditjennakes.kemkes… Xsec: zone-xsec.com/mirror/id/702581 Attacker: ./FreedomXploit Team: MINIONS CYBER CRIME URL: simantar.sumbawabaratkab.go.id… Xsec: zone-xsec.com/mirror/id/702579…
PT PINS Indonesia adalah anak usaha Telkom Indonesia yang bergerak di bidang IoT. Untuk mendukung kegiatan bisnisnya, perusahaan ini memiliki delapan kantor area, yakni di Medan, Jakarta, Bandung, Semarang, Surabaya, Denpasar, Makassar, dan Balikpapan.
Summary: A cybersecurity operation by watchTowr Labs has successfully hijacked over 4,000 unique web backdoors by taking control of abandoned domains, allowing them to track compromised systems and potentially commandeer them. This initiative highlights vulnerabilities in the infrastructure used by…
Attacker: Ghost Haxor Team: TEAM ROKES 315 url: simpeg.kemhan.go.id/banteng.ph… Xsec: zone-xsec.com/mirror/id/702385…
This report analyzes recent cyber threats impacting the financial sector in South Korea and beyond, highlighting malware, phishing cases, and ransomware attacks. It details incidents such as database leaks, ransomware breaches, and unauthorized access sales. T…
The FunkSec ransomware group emerged in late 2024, quickly gaining notoriety for claiming over 85 victims in December alone. Utilizing AI-assisted malware development, the group blurs the lines between hacktivism and cybercrime, complicating assessments of the…