SecuriTricks

Rivers of Phish: Sophisticated Phishing Targets Russia's Perceived Enemies Around the Globe

An extensive investigation uncovered an elaborate phishing campaign conducted by a Russia-based threat actor known as COLDRIVER, attributed to Russia's Federal Security Service. The campaign employed personalized social engineering tactics to target civil society groups, NGOs, journalists, and gove…

phishing

javascript

Published: August 14, 2024

Downloadable IOCs: 28

Exploiting CVE-2024-21412: A Stealer Campaign Unleashed

This report details a malicious campaign exploiting the CVE-2024-21412 vulnerability in Microsoft Windows SmartScreen to bypass security warnings and deliver malware. Attackers employ crafted links, LNK files, and HTA scripts to download decoy PDFs and shell code injectors, ultimately injecting ste…

Published: July 24, 2024

Linked vulnerabilities : CVE-2024-21412

Downloadable IOCs: 27

PDF “Flawed Design” Exploitation

Check Point Research identified an unusual pattern involving PDF exploitation, mainly targeting users of Foxit Reader. This exploit triggers security warnings that could deceive users into executing harmful commands. The exploitation occurs through a flawed design in Foxit Reader, showing 'OK' as t…

Published: May 14, 2024

Downloadable IOCs: 40

Tag: pdf

Attack reports

Emerging Phishing Techniques: New Threats and Attack Vectors

Winos 4.0 Spreads via Impersonation of Official Email to Target Users in Taiwan

Hidden in Plain Sight: PDF Mishing Attack

Beware of phishing emails impersonating major domestic entertainment agencies

Rivers of Phish: Sophisticated Phishing Targets Russia's Perceived Enemies Around the Globe

Exploiting CVE-2024-21412: A Stealer Campaign Unleashed

PDF “Flawed Design” Exploitation