SecuriTricks

Phishing Campaign Targets Indian Defense Using Credential-Stealing Malware

APT36, a Pakistan-based cyber espionage group, is actively targeting Indian defense personnel through sophisticated phishing campaigns. The group disseminates emails with malicious PDF attachments resembling official government documents. When opened, these PDFs display a blurred background and a b…

phishing

pakistan

Published: June 21, 2025

Downloadable IOCs: 0

Cyber Attacks on Government Agencies: Detect and Investigate

This analysis examines cyber threats targeting government institutions worldwide, focusing on three case studies: a phishing email targeting the South Carolina Department of Employment and Workforce, a fraudulent domain mimicking the U.S. Social Security Administration, and a malicious PDF posing a…

credential-harvesting

Published: June 4, 2025

Downloadable IOCs: 2

Actionable threat hunting with Threat Intelligence (I) - Hunting malicious desktop files

This analysis explores the detection of malicious .desktop files used by threat actors to infect Linux systems. It explains the structure of these files and how they are manipulated to obfuscate malicious content. The report details the execution process of these files, which often involve opening …

google threat intelligence

gnome

Published: May 16, 2025

Downloadable IOCs: 3

Rivers of Phish: Sophisticated Phishing Targets Russia's Perceived Enemies Around the Globe

An extensive investigation uncovered an elaborate phishing campaign conducted by a Russia-based threat actor known as COLDRIVER, attributed to Russia's Federal Security Service. The campaign employed personalized social engineering tactics to target civil society groups, NGOs, journalists, and gove…

Published: August 14, 2024

Downloadable IOCs: 28

Exploiting CVE-2024-21412: A Stealer Campaign Unleashed

This report details a malicious campaign exploiting the CVE-2024-21412 vulnerability in Microsoft Windows SmartScreen to bypass security warnings and deliver malware. Attackers employ crafted links, LNK files, and HTA scripts to download decoy PDFs and shell code injectors, ultimately injecting ste…

Published: July 24, 2024

Linked vulnerabilities : CVE-2024-21412

Downloadable IOCs: 27

PDF “Flawed Design” Exploitation

Check Point Research identified an unusual pattern involving PDF exploitation, mainly targeting users of Foxit Reader. This exploit triggers security warnings that could deceive users into executing harmful commands. The exploitation occurs through a flawed design in Foxit Reader, showing 'OK' as t…

Published: May 14, 2024

Downloadable IOCs: 40

Tag: pdf

Attack reports

Phishing Campaign Targets Indian Defense Using Credential-Stealing Malware

Cyber Attacks on Government Agencies: Detect and Investigate

Actionable threat hunting with Threat Intelligence (I) - Hunting malicious desktop files

Emerging Phishing Techniques: New Threats and Attack Vectors

Winos 4.0 Spreads via Impersonation of Official Email to Target Users in Taiwan

Hidden in Plain Sight: PDF Mishing Attack

Beware of phishing emails impersonating major domestic entertainment agencies

Rivers of Phish: Sophisticated Phishing Targets Russia's Perceived Enemies Around the Globe

Exploiting CVE-2024-21412: A Stealer Campaign Unleashed

PDF “Flawed Design” Exploitation