Tag: compromised-servers

2 Attack Reports | 0 Vulnerabilities

Attack reports

Multiplatform Cryptomining Campaign Uses Fake Error Pages to Hide Payload

A new iteration of a broad cryptomining campaign, dubbed Soco404, has been identified. The attackers exploit vulnerabilities in cloud environments, particularly targeting PostgreSQL misconfigurations, to deploy cryptominers on both Linux and Windows systems. They use process masquerading, achieve p…
persistence
cryptomining
CVE-2025-24813
compromised-servers
2025-07-24
process-masquerading
multiplatform
fake-404-pages
postgresql
crypto-scam
soco404
Published: July 24, 2025
Downloadable IOCs: 0

The Return of Pharmacy-Themed Spam

Pharmaceutical-themed spam campaigns continue to target individuals and organizations, particularly in the healthcare and pharmaceutical sectors. Recent observations reveal a bulk spam campaign using spoofed identities and compromised infrastructure to send deceptive emails. The attackers employ ta…
phishing
spam
social-engineering
domain-spoofing
2025-04-26
pharmacy
compromised-servers
email-security
fraudulent-websites
dkim
Published: April 26, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports