Cisco Talos documents GhostSec’s expanded operations, including a Golang rework of GhostLocker (GhostLocker 2.0) that persists via the Windows Startup folder, communicates with a C2 at 94[.]103[.]91[.]246, exfiltrates targeted documents via HTTP POST, then enc…
Tag: INDONESIA
Have you or anyone near you became a victim of online scamming? This article will introduce you to online scams, how the waves of scammers target their victims and in which ways, and what damage they inflict. This article’s contents are based on AhnLab’s in-house data as well as externally available…
A U.S. judge has ordered NSO Group to hand over its source code for Pegasus and other products to Meta as part of the social media giant’s ongoing litigation against the Israeli spyware vendor.
The decision, which marks a major legal victory for Meta, which filed the lawsuit in October 2019 for using its infrastructure to distribute the spyware to approximately
Internal documents from I-Soon show the company focuses more on processing and analyzing stolen data than on developing novel exploits, delivering analyst-facing platforms that use deep learning to classify and extract intelligence. Their offensive toolset rel…
Following a string of major public disclosures, Insikt Group has identified new infrastructure associated with operators of the mercenary mobile spyware Predator.
Sekoia.io reports that Predator spyware infrastructure remained active after the Predator Files disclosures, with new domains and command-and-control clusters created post-publication. The investigation links these clusters to Intellexa customers tracked as Ly…
This report details statistics and key trends associated with mobile malware: Google Play Trojans, malicious messaging app mods, and others.
Victim: KAI Country : ID Actor: stormous Source: Discovered: 2024-02-26 03:47:27.770023 Description: indonesia…
TikTok is rolling out in-app election centres across EU languages to curb misinformation and help users distinguish fact from fiction. The article also notes broader global misinformation trends and highlights ongoing cyber threats tied to misused cloud infras…
HomuWitch is a C# .NET ransomware that primarily targets individual users via a SmokeLoader backdoor disguised as pirated software, compresses files with Deflate and encrypts them with AES-CBC appending the .homuencrypted extension. Avast discovered a flaw in …
Rajawali Group is an Indonesia National Investment Holding Company operating in diverse industries covering plantation, mining, hotel and property (Sheraton, Luxury Collection, St Regis and Four Seasons), infrastructure, transportation (Express Taxi)…
The Avast Q4/2023 Threat Report chronicles a record year of attacks, highlighted by the revival of Qakbot, a surge in PDF-based social engineering, and expanding menace across adware, information stealers, ransomware, and mobile threats. It also covers notable…
PT Samuel Sekuritas Indonesia (SSI) is a prominent financial advisory company based in Jakarta, Indonesia. Established in 1992, the company operates as a full-service investment bank, offering a wide range of financial services to both institutional and retail clients. SSI adopts a selective approach in choosing its businesses and clients.
“PT Kereta Api Indonesia” is the national railway company in Indonesia, also known as “Kereta Api.” It is responsible for operating train services throughout the country. The company was established to provide public transportation via railways and plays a vital role in connecting cities and regions in Indonesia.
ESET researchers describe the growth of deceptive loan apps for Android and techniques they use to circumvent Google Play