Tag: SOCIAL MEDIA

Summary: This content discusses the prevalence of recovery fraud in the cryptocurrency space, where victims of crypto scams or cyberattacks are targeted again by individuals or companies claiming to offer recovery services but end up stealing their upfront fees.

Threat Actor: Recovery fraudsters | recovery fraudsters Victim: Individuals who have fallen victim to crypto scams or cyberattacks | crypto scam victims

Key Point :

Recovery fraud, where victims of crypto scams are targeted again by individuals or companies claiming to offer recovery services, is a growing concern in the cryptocurrency space.…
Read More

Summary: This content discusses a path traversal-affiliated vulnerability pattern found in multiple popular Android applications, which could lead to arbitrary code execution and token theft.

Threat Actor: Microsoft | Microsoft Victim: Multiple popular Android applications | popular Android applications

Key Point :

A path traversal-affiliated vulnerability pattern was discovered in multiple popular Android applications, allowing a malicious application to overwrite files in the vulnerable application’s home directory.…
Read More

Summary: A hacking group linked to Iran’s Revolutionary Guard Corps impersonated journalists and human rights activists as part of a social engineering campaign, targeting organizations such as The Washington Post and prominent think tanks.

Threat Actor: APT42 | APT42 Victim: Various news organizations and think tanks including The Washington Post, The Economist, and the Aspen Institute.…

Read More

Summary: The content discusses the results of a survey conducted by Bitwarden on user password practices, highlighting the prevalence of password reuse and the use of personal information in credentials, which pose significant cybersecurity risks.

Threat Actor: N/A

Victim: N/A

Key Point :

25% of respondents globally reuse passwords across 11-20+ accounts.…
Read More

Written by: Kelli Vanderlee, Jamie Collier

 

Executive Summary

The election cybersecurity landscape globally is characterized by a diversity of targets, tactics, and threats. Elections attract threat activity from a variety of threat actors including: state-sponsored actors, cyber criminals, hacktivists, insiders, and information operations as-a-service entities. Mandiant assesses with high confidence that state-sponsored actors pose the most serious cybersecurity risk to elections.…

Read More

Summary: The Lazarus Group, a North Korea-linked threat actor, used fabricated job lures to distribute a new remote access trojan called Kaolin RAT. The malware is part of a multi-stage attack chain that ultimately deploys the FudModule rootkit.

Threat Actor: Lazarus Group | Lazarus Group Victim: Not specified

Key Point :

The Lazarus Group used fabricated job offers to trick targets into launching a malicious optical disc image (ISO) file.…
Read More

Summary: Iranian state-sponsored hackers infiltrated hundreds of thousands of employee accounts at US companies and government agencies as part of a multiyear cyber espionage campaign aimed at stealing military secrets.

Threat Actor: Iranian state-sponsored hackers | Iranian state-sponsored hackers Victim: US companies and government agencies | US companies and government agencies

Key Point :

An elite team of Iranian state-sponsored hackers successfully infiltrated hundreds of thousands of employee accounts at US companies and government agencies as part of a multiyear cyber espionage campaign aimed at stealing military secrets.…
Read More

Summary: This content highlights the concerns and impact of deepfake technology, particularly in relation to elections and the spread of misinformation and disinformation.

Threat Actor: AI-generated deepfake technology

Victim: General public

Key Point :

23% of Americans have encountered a political deepfake that they later discovered to be fake, indicating the prevalence of this technology.…
Read More

Curated bookmark list categorized by area and event monitoring, person of interest search, corporate profiling, mapping, AI, intelligence analysis, reporting tools, collective tools, cryptocurrency, country specific, verification and fact-checking.

They are broken down into appropriate categories such as:

area and event monitoringperson of interest searchcorporate profilingmappingartificial intelligenceintelligence analysisreporting toolscollective toolscryptocurrencycountry specificverification and fact-checking.…
Read More
https://whatsmyname.app

How to use:

Enter the username(s) in the search box, select any category filters & click the search icon or press CTRL+EnterResults will present as icons on the left & in a searchable table on the rightDocument & Google searches will automatically populate at the bottom, using the first username in your list as the search term

This video showcases a quick tutorial on using a web-based tool to find social media profiles efficiently.…

Read More

Attackers are constantly seeking new vulnerabilities to compromise Kubernetes environments. Microsoft recently uncovered an attack that exploits new critical vulnerabilities in OpenMetadata to gain access to Kubernetes workloads and leverage them for cryptomining activity.

OpenMetadata is an open-source platform designed to manage metadata across various data sources.…

Read More

Hacklido.com is a cybersecurity community platform focused on various aspects of ethical hacking, security research, and cybersecurity knowledge sharing. The website hosts a range of content including blogs on topics like cybersecurity trends, techniques to bypass security measures such as one-time password (OTP) systems, and discussions on vulnerabilities like cross-site scripting (XSS)​ (HACKLIDO)​​.…

Read More

At its core, threat hunting is the practice of proactively searching for signs of malicious activities or indicators of compromise (IOCs) before threat actors gain a deep foothold within your organization’s environment.

This involves observing both attacker behaviors (e.g., evidence of lateral movement, privilege escalation attempts, anomalous user activity) and indicators (e.g.,…

Read More

Threat Actor: Unknown | Unknown Victim: E-commerce Company | E-commerce Company Price: Not specified Exfiltrated Data Type: Personal and transaction data

Additional Information:

The threat actor claims to possess a database from an e-commerce company. The compromised database contains personal information of thousands of users and transaction details.…
Read More
Key findings:The group is targeting various countries around the world in addition to its priority region of Latin America.It uses long chains that incorporate a variety of tools and malware: AgentTesla, FormBook, Remcos, LokiBot, Formbook, Guloader, SnakeKeylogger, XWorm, and others.The group uses compromised legitimate FTP servers for C2, and SMTP servers, for C2 and phishing.…
Read More