Tag: brand abuse

3 Attack Reports | 0 Vulnerabilities

Attack reports

Beyond Tax Returns: How Shared Malware Infrastructure Scales Brand Abuse In Indonesia

A sophisticated fraud campaign exploiting Indonesia's tax season targeted 67 million residents through fake Coretax applications distributed via phishing websites and WhatsApp social engineering. The GoldFactory threat cluster orchestrated operations using Gigabud.RAT and MMRat malware families wit…
phishing
vishing
banking trojan
maas
indonesia
brand abuse
2026-05-20
gigabud.rat
goldfactory
mmrat
taotie
Published: May 20, 2026
Downloadable IOCs: 3

Foxit Impersonation: Fake PDF Installer Deploys VNC

Attackers are leveraging the trusted reputation of Foxit PDF Reader, used by over 650 million people, to distribute malicious installers disguised as legitimate software. Rather than exploiting vulnerabilities, threat actors impersonate the vendor through fake installers with document-themed filena…
social engineering
remote access
brand abuse
trojanized installer
2026-04-23
document decoy
foxit impersonation
ultravnc
Published: April 23, 2026
Downloadable IOCs: 7

Inside the 2025 Energy Phishing Wave: Chevron, Conoco, PBF, Phillips 66

In 2025, a significant surge in phishing attacks targeting major U.S. energy companies was observed. The campaign primarily focused on Chevron, ConocoPhillips, PBF Energy, and Phillips 66, utilizing sophisticated impersonation techniques. Attackers employed HTTrack-based cloning to replicate legiti…
phishing
rhadamanthys
credential harvesting
domain impersonation
investment scams
2025-09-12
energy sector
httrack
keitaro
website cloning
brand abuse
Published: September 12, 2025
Downloadable IOCs: 43
Click here to see more Attack Reports