Tag: financial theft

4 Attack Reports | 0 Vulnerabilities

Attack reports

Operation DualScript: Multi-Stage PowerShell Malware Targets Crypto

Operation DualScript is a sophisticated multi-stage malware campaign targeting cryptocurrency and financial activities. It utilizes Windows Scheduled Tasks, VBScript launchers, and PowerShell execution to maintain persistence while minimizing disk artifacts. The attack operates through two parallel…
powershell
cryptocurrency
in-memory execution
evasion techniques
multi-stage
clipboard hijacking
financial theft
2026-03-31
retrorat
Published: March 31, 2026
Downloadable IOCs: 1

Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit

A sophisticated iOS exploit kit named Coruna has been discovered, targeting iPhones running iOS 13.0 to 17.2.1. The kit contains five full iOS exploit chains and 23 exploits, using advanced techniques and mitigation bypasses. Initially used by a surveillance vendor, it was later employed in targete…
ios
surveillance
cryptocurrency
zero-day
exploit kit
financial theft
CVE-2023-43000
2026-03-03
coruna
CVE-2020-27932
CVE-2020-27950
CVE-2021-30952
CVE-2022-48503
CVE-2023-32409
CVE-2023-32434
CVE-2023-38606
CVE-2023-41974
CVE-2024-23222
CVE-2024-23225
CVE-2024-23296
plasmagrid
Published: March 3, 2026
Linked vulnerabilities : CVE-2023-43000 (CVSS 8.8), CVE-2023-41974, CVE-2024-23222, CVE-2023-32434, CVE-2023-32409, CVE-2024-23296, CVE-2023-38606, CVE-2020-27950, CVE-2021-30952, CVE-2020-27932, CVE-2022-48503, CVE-2024-23225
Downloadable IOCs: 77

Mercenary Akula Hits Ukraine-Supporting Financial...

A European financial institution involved in regional development and reconstruction initiatives was targeted by a social engineering attack attributed to the Russia-aligned Mercenary Akula. The attack used a spoofed Ukrainian judicial domain to deliver an email containing a link to a remote access…
social engineering
spearphishing
remcos
cyber espionage
remote access
quasarrat
financial theft
2026-02-25
davinci group
fire cells group
remote manipulator system
uac-0050
Published: February 25, 2026
Downloadable IOCs: 10

Unraveling the U.S. toll road smishing scams

A widespread financial theft SMS phishing campaign targeting toll road users across multiple U.S. states has been observed since October 2024. The attacks impersonate automatic payment services like E-ZPass, claiming outstanding bills under $5 USD and warning of late fees. Victims are directed to s…
typosquatting
phishing kit
smishing
sms phishing
2025-04-10
toll road
u.s. states
financial theft
2025-04-11
toll road scams
Published: April 11, 2025
Linked vulnerabilities : CVE-2024-4577 (CVSS 9.8)
Downloadable IOCs: 43
Click here to see more Attack Reports