Early Warnings for Cyber Threats | Threat Intelligence Reports


Global Ransomware Campaign Targeting a Growing List of Companies – Night Blood
Early Warning 2021-06-24
Global Ransomware Campaign Targeting a Growing List of Companies – Night Blood

Table of Contents Executive Summary Early Warning Recommendations Appendix A - About REvil Group EXECUTIVE SUMMARY Between 22 May – 12 June, CYFIRMA Research identified a Global Ransomware Campaign named…

Potential Data Exfiltration Ransomware Campaign
Early Warning 2020-11-09
Potential Data Exfiltration Ransomware Campaign

CYFIRMA Threat Intelligence identified multiple threats against organizations across the world as part of a potential data exfiltration ransomware campaign. Upon performing additional investigation, CYFIRMA research identified several indicators suggesting…

RISING CYBER ATTACKS DUE TO CHINA-INDIA BORDER CONFLICT
Early Warning 2020-06-24
RISING CYBER ATTACKS DUE TO CHINA-INDIA BORDER CONFLICT

RISING CYBER ATTACKS DUE TO CHINA-INDIA BORDER CONFLICT  Reporting Date: Updated 23 June 2020 Assessment Period: 8 – 23 June 2020 Analysis on 23 Jun 2020 Release: CYFIRMA Research issued…

GLOBAL COVID 19-RELATED PHISHING CAMPAIGN BY NORTH KOREAN OPERATIVES LAZARUS GROUP EXPOSED BY CYFIRMA RESEARCHERS
Early Warning 2020-06-18
GLOBAL COVID 19-RELATED PHISHING CAMPAIGN BY NORTH KOREAN OPERATIVES LAZARUS GROUP EXPOSED BY CYFIRMA RESEARCHERS

Reporting Date: 18 June 2020 Assessment Period: 1 to 16 June 2020 Subject: Hacker groups are planning a large-scale phishing campaign targeted at more than 5M individuals and businesses (small,…

Early warning – Microsoft ‘wormable’ BlueKeep CVE-2019-0708
Early Warning 2019-06-11
Early warning – Microsoft ‘wormable’ BlueKeep CVE-2019-0708

CYFIRMA Threat Intelligence has gathered information about a possible reconnaissance and hacking campaigns running in wild known as “Ckker19D” and “植物切割” known as “Plant Cutter” in English. CTI suspects the campaigns to…

EARLY WARNING – NGINX WEBSERVER EXPLOIT
Early Warning 2018-11-13
EARLY WARNING – NGINX WEBSERVER EXPLOIT

In the last 24 hours, CYFIRMA Threat Intelligence (CTI) has observed hacker conversations in Dark web suggesting global reconnaissance namely “NGUME” and “LongNeck” to identify vulnerable NGINX web servers. We…

EARLY WARNING OF A DRUNKED-APT CAMPAIGN – SUSPECTED DATA EXFILTRATION
Early Warning 2018-07-02
EARLY WARNING OF A DRUNKED-APT CAMPAIGN – SUSPECTED DATA EXFILTRATION

Antuit Cyber Intelligence Research Team (“ACIRT”) has determined a possibility of an APT campaign leveraging compromised websites to install malicious plugins/ extensions on the victim’s browser. Identified as Drunked-APT, this…

EARLY WARNING OF A NEW DNS HIJACKING ATTACK CAMPAIGN
Early Warning 2018-05-22
EARLY WARNING OF A NEW DNS HIJACKING ATTACK CAMPAIGN

Between 20th – 25th Apr, Antuit Cyber Intelligence Research Team (“ACIRT”) warned about an Android Banking Trojan dubbed as Roaming Mantis Malware which posed a threat of DNS Hijacking. ACIRT…

EARLY WARNING OF A POSSIBLE EMAIL INTERCEPTOR MALWARE ATTACK
Early Warning 2018-05-07
EARLY WARNING OF A POSSIBLE EMAIL INTERCEPTOR MALWARE ATTACK

Over the last 24 hours, Antuit Cyber Intelligence Research Team (“ACIRT”) have observed North Korea based threat actors suspected to be affiliated to Lazarus Group in various deep, dark web…