Tag: FINANCIAL

Beware of Contacts through LinkedIn: They Target Your Organization’s Property, Not Yours – JPCERT/CC Eyes | JPCERT Coordination Center official Blog
Recent reports indicate unauthorized access in Japan, primarily using LinkedIn as an infection vector. The Lazarus attack group has been identified as responsible for these attacks, which have targeted organizations since 2019. Recommendations include restricting the use of social networking services on work devices. Affected: LinkedIn, Bitcoin.DMM.com…
Read More

Victim: PetroVietnam Exploration Production Corporation Country : VN Actor: hunters Source: https://hunters55rdxciehoqzwv7vgyv6nt37tbwax2reroyzxhou7my5ejyid.onion/companies/4004170824 Discovered: 2025-01-20 21:17:29.237592 Published: 2025-01-20 21:17:26.984396 Description : Exfiltrated data: Yes Encrypted data: Yes

About Country VN (Vietnam)

– Cybersecurity Landscape: Vietnam has been evolving rapidly in the field of cybersecurity, facing increasing threats as the country digitalizes.…

Read More

Victim: theurswickschool.co.uk Country : GB Actor: kairos Source: http://nerqnacjmdy3obvevyol7qhazkwkv57dwqvye5v46k5bcujtfa6sduad.onion/detail?code=theurswickschool-co-uk-uk-98gb Discovered: 2025-01-20 21:13:50.771920 Published: 2025-01-20 21:13:50.771920 Description : Below are key points about The Urswick School in the UK: Location: The Urswick School is located in London, UK. Type: It is a co-educational secondary school. Age Range: The school caters to students aged 11 to 16.…
Read More
Facilitating Phishing and Pig Butchering Activities using Zendesk Infrastructure [Bait & Switch Mode]
This report serves as an advisory to organizations regarding the misuse of Zendesk’s platform for creating subdomains that impersonate legitimate companies, potentially facilitating investment scams. The analysis highlights how these domains can be exploited for phishing attacks, particularly through a technique known as Pig Butchering. Organizations are urged to block or take down suspicious domains to prevent disruptions.…
Read More

Victim: malindoair.com Country : MY Actor: apt73 Source: http://basherq53eniermxovo3bkduw5qqq5bkqcml3qictfmamgvmzovykyqd.onion/page_company.php?id=114 Discovered: 2025-01-20 17:41:58.153823 Published: 2025-01-20 17:41:58.153823 Description : Airlines in Bangladesh Airports in Bangladesh Air Services in Bangladesh Passenger Identification Name of Passenger Reservation Details Date of Travel

About Country MY (Malaysia)

– Cybersecurity Landscape: Malaysia has been proactive in developing its cybersecurity framework, with initiatives led by the Malaysian Communications and Multimedia Commission (MCMC) and CyberSecurity Malaysia.…

Read More
Qbot is Back Connect
QBot, a modular information stealer, has resurfaced following law enforcement actions aimed at its operators. Recent research indicates the use of DNS tunneling in conjunction with Zloader, revealing connections to new backConnect malware that may be utilized in ransomware attacks. Affected: QBot operators, financial institutions, cybersecurity sector

Keypoints :

QBot, also known as Qakbot or Pinkslipbot, has been active since 2007.…
Read More
Ransom! compass-underwriting-ltd

Victim: compass-underwriting-ltd Country : GB Actor: sarcoma Source: Discovered: 2025-01-20 13:59:55.549064 Published: 2025-01-20 13:59:55.549064 Description : Key Points about Compass Underwriting Ltd

History – Established in 1986 as a Lloyd’s syndicate. – Evolved into a leading Accident & Health underwriting agency in the UK. – Acquired by the Elseco Group in April 2022.…

Read More
The Lynx ransomware, identified as a successor to the INC ransomware family, has been actively targeting various industries in the US and UK since July 2024. Operating under a ransomware-as-a-service model, Lynx employs tactics such as phishing, service termination, and double extortion. The ransomware uses robust encryption methods and has shown a significant overlap with its predecessor, INC.…
Read More
A series of critical vulnerabilities have been reported across various platforms, including Aviatrix Controller and Microsoft 365 applications, leading to significant security risks such as unauthorized access and data breaches. Additionally, a new phishing tactic targeting Apple iMessage users and a malicious PyPi package aimed at Discord developers have emerged, highlighting the evolving threat landscape.…
Read More

Victim: Richardson Country : Actor: qilin Source: http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/view?uuid=65724f36-38b3-3cab-a248-3f8c3fb1f0fe Discovered: 2025-01-19 15:32:56.228135 Published: 2025-01-19 15:31:40.339140 Description : Founded in 1978, Richardson Sales Performance is an international company specializing in sales training and performance enhancement. We are dedicated to helping you increase revenue and foster long-term customer relationships.…
Read More
Massive Leak of Online Loan User Data Raises Concerns
Victim: Online Loan Platform | Online Loan Platform Price: Not disclosed Data: Usernames, email addresses, phone numbers, loan amounts, financial transaction records

Keypoints :

Massive data breach involving an online loan platform. Exposed sensitive user information, raising concerns about data security and privacy. Leaked database includes usernames, email addresses, phone numbers, loan amounts, and financial transaction records.…
Read More

Victim: MassDevelopment Country : US Actor: bianlian Source: http://bianlianlbc5an4kgnay3opdemgcryg2kpfcbgczopmm3dnbz3uaunad.onion/companies/massdevelopment.com/ Discovered: 2025-01-18 11:58:56.070595 Published: 2025-01-18 11:58:56.070595 Description : MassDevelopment, the state’s development finance agency and land bank, collaborates with businesses, nonprofit organizations, banks, and communities to promote economic growth.

Ransomware Victims – ALL | Other Victims by bianlian

Understanding the Context of MassDevelopment About the Victim: MassDevelopment MassDevelopment is the state’s development finance agency and land bank.…
Read More

Victim: Marina Family Medical Country : AU Actor: moneymessage Source: http://blogvl7tjyjvsfthobttze52w36wwiz34hrfcmorgvdzb6hikucb7aqd.onion/news.php?id=1 Discovered: 2025-01-18 12:02:43.415607 Published: 2025-01-18 12:02:43.415607 Description : Marina Family Medical is a healthcare provider that provides a wide range of medical services. Their team of experts specializes in family medicine, enabling them to offer health and wellness care to patients of all ages.…
Read More