Tag: cloud infrastructure

2 Attack Reports | 0 Vulnerabilities

Attack reports

SharePoint Zero-Day Exploit (ToolShell) - Network Infrastructure Mapping

Chinese threat actors have been exploiting zero-day vulnerabilities in SharePoint servers, known as ToolShell, affecting nearly 150 organizations worldwide. The attacks, attributed to groups like Linen Typhoon and Violet Typhoon, began as early as July 17, 2025, targeting government agencies, criti…

chinese threat actors

cloud infrastructure

warlock ransomware

network mapping

telecommunication abuse

Published: August 2, 2025

Downloadable IOCs: 0

Eggs in a Cloudy Basket: Skeleton Spider's Trusted Cloud Malware Delivery

Skeleton Spider, also known as FIN6, is a financially motivated cybercrime group that has evolved from POS breaches to broader enterprise threats. They employ social engineering tactics, posing as job seekers on platforms like LinkedIn to deliver phishing messages. Their preferred payload is more_e…

social engineering

evasion techniques

cloud infrastructure

skeleton spider

Published: June 11, 2025

Downloadable IOCs: 24

Click here to see more Attack Reports