The Marko Polo cybercrime gang represents a growing global financial threat, steering at least 30 ongoing fraud campaigns simultaneously and wielding an arsenal of sophisticated malware that has compromised tens of thousands of devices. Researchers reported that the group's scams are going after individuals and organizations alike by impersonating popular brands such as Zoom, Discord, and OpenSea, mainly in online gaming, virtual meeting software, and cryptocurrency platform markets. The effor
infostealer (4)
In 1923, the Soviet Union created the Nagorno-Karabakh Autonomous Oblast (an oblast is an administrative region or province) within the Azerbaijan Soviet Socialist Republic. This oblast has a 95% ethnically Armenian population. In 1988, Nagorno-Karabakh intended to leave Azerbaijan and join the neighboring Republic of Armenia. While the Soviet Union was able to keep the resulting tension under control, once the USSR began to collapse, armed conflict between Azerbaijan and Armenia began for co
Previous attacks from the Iranian Phosphorus APT (aka Charming Kitten, APT35) are well documented. Recently a new set of tools incorporated into the group's arsenal, and a connection with the Memento ransomware, have been discovered. Researchers from have detected a new and undocumented PowerShell backdoor that supports downloading malware such as a keylogger and an infostealer. The code runs in the context of a .NET app without launching powershell.exe and thus avoiding detection.
Activity Summary - Week Ending 18 June 2021:
- Red Sky Alliance observed 39 unique email accounts compromised with Keyloggers
- Analysts identified 43,797 connections from new unique IP Addresses
- 2,102 new IP addresses were observed participating in various Botnets
- New Agent Tesla Variant
- Infostealer Malware
- Gelsemium
- Norms: Do they Mean Anything?
- Fancy Lazarus
- Asia Pacific Public Sector Cyber Security Executive Council
- Major Rx. Company still has Cyber Issues
- Commander X Busted in Mexico
Link to
