Tag: 2024-09-12
4 attack reports | 88 vulnerabilities
Attack reports
DragonRank, a Chinese-speaking SEO manipulator service provider
Cisco Talos is disclosing a new threat called “DragonRank” that primarily targets countries in Asia and a few in Europe, operating PlugX and BadIIS for search engine optimization (SEO) rank manipulation.
Downloadable IOCs 35
Phishing Via Typosquatting and Brand Impersonation: Trends and Tactics
From February to July 2024, an analysis of over 500 popular domains revealed more than 10,000 malicious lookalike domains employing typosquatting and brand impersonation techniques. Google, Microsoft, and Amazon were the most targeted brands, accounting for nearly 75% of phishing domains. Almost ha…
Downloadable IOCs 10
Targeted Iranian Attacks Against Iraqi Government Infrastructure
Check Point Research uncovered a new malware campaign targeting Iraqi government entities, employing custom tools named Veaty and Spearal. The attack utilizes various techniques including passive IIS backdoors, DNS tunneling, and C2 communication via compromised email accounts. The malware shows co…
Downloadable IOCs 16
19 Websites Identified as Part of an Iranian Global Influence Operation
An investigation has uncovered a network of 19 websites created by Iran as part of a global influence operation. These sites, presenting themselves as independent sources of opinion and analysis, target audiences across the United States, Europe, the Middle East, the Caucasus, and South America. Tw…
Downloadable IOCs 19