~Recordedfuture~
TAG-193 targets CIS governments via spearphishing, trusted services, reverse shells, and CVE-2025-8088 exploitation.
-
IOCs: CVE-2025-8088, LAPLAS, FoalShell
-
#Espionage #ThreatActor #ThreatIntel
@cyfar.ca
@cyfar.ca~Recordedfuture~
TAG-193 targets CIS governments via spearphishing, trusted services, reverse shells, and CVE-2025-8088 exploitation.
-
IOCs: CVE-2025-8088, LAPLAS, FoalShell
-
#Espionage #ThreatActor #ThreatIntel
@yasna.ioSouth Korean banks suffered data breaches exposing over 60,000 customers, with AI-powered tool ARTEX reportedly used by attackers to steal sensitive information.
#ThreatActor #ArtificialIntelligence #infosec
Full synthesis & sources: yasna.io
@sergiocuellar.bsky.socialBREEZE COMET, a financially motivated threat actor targeting Brazilian financial services, evolves tactics using AI and compromised websites for fraudulent transfers. Mitigation and detection tips provided. #Cybersecurity #ThreatActor #FraudDetection
@cyfar.ca~Spiderlabs~
PoCs abuse security products to steal hashes, bypass UAC, evade detection, and gain SYSTEM access.
-
IOCs: \Device\NamedPipe\PRETTYPRAGUE, \Device\NamedPipe\FALCONFLANK, \\[.]\aswSnx
-
#ThreatActor #ThreatIntel #Windows
@it4intserver.bsky.socialiT4iNT SERVER Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution VDS VPS Cloud #CyberSecurity #CryptoTheft #FinancialInstitutions #BrazilFinance #ThreatActor