Colombia's national CERT warns that a fake "proof of compliance" request is installing a keylogger and a remote access trojan on Windows PCs. Anything typed on an infected machine should be treated as stolen.
@intelfusions.com
@intelfusions.comColombia's national CERT warns that a fake "proof of compliance" request is installing a keylogger and a remote access trojan on Windows PCs. Anything typed on an infected machine should be treated as stolen.
@infosecbot.bsky.social#asyncrat #darkcrystal #opendir at:
https://interactions-according-reports-syndication\.trycloudflare.com
https://periods-genetic-stones-government\.trycloudflare.com
— from @James_inthe_box (https://x.com/James_inthe_box/status/2103154466770010137)
@james-inthe-box.infosec.exchange.ap.brid.gy#asyncrat #darkcrystal #opendir at:
https:// interactions-according-reports-syndication\\.trycloudflare.com
https:// periods-genetic-stones-government\\.trycloudflare.com
@intelfusions.comA phishing site posing as Italy's tax agency offers a holiday bonus and rebuilds the national SPID login flow to look convincing. It was the standout item in a week of 191 malicious campaigns aimed at Italy.
@thedailytechfeed.com
@intelfusions.comSomeone posing as a CoinDesk marketing executive messaged security researchers after DEF CON with a link to a real Google Doc. Opening it while signed in was enough to report the reader's IP address, location and whether they run a crypto wallet.
@lazarusholic.bsky.social