Tag: api abuse

2 Attack Reports | 0 Vulnerabilities

Attack reports

Uncovering a Tor-Enabled Docker Exploit

A sophisticated attack campaign exploits exposed Docker Remote APIs and leverages the Tor network to deploy stealthy cryptocurrency miners. The attackers gain access to containerized environments, use Tor to mask their activities, and employ the ZStandard compression algorithm for efficient payload…
xmrig
docker
tor
cryptocurrency mining
container exploitation
ssh backdoor
api abuse
2025-06-18
zstandard compression
Published: June 18, 2025
Linked vulnerabilities : CVE-2025-3248 (CVSS 9.8)
Downloadable IOCs: 6

PrintSteal: Exposing unauthorized CSC-Impersonating Websites Engaging in Large-Scale KYC Document Generation Fraud

This investigation uncovers a massive criminal operation known as 'PrintSteal' that generates and distributes fake Indian KYC documents. The scheme involves over 1,800 fraudulent domains impersonating government websites, with at least 2,727 registered operators on one platform alone. Over 167,000 …
india
identity theft
government impersonation
2025-03-06
api abuse
financial crime
document forgery
kyc fraud
Published: March 6, 2025
Downloadable IOCs: 9
Click here to see more Attack Reports