Cybercrime, AgentTesla now passes from Russian customs
The doc attachment contacts a link, exploiting the Equation Editor vulnerability, and downloads an exe: the malware. Data is then exfiltered via SMTP to an email address.
Syria, the Islamic State tries in vain to attack the Al-Hawl camp
Pro-ISIS jihadists want to raise their heads by taking advantage of the Turkish Claw-Sword operation in northern Kurdistan, but SDF and Inherent Resolve had foreseen this.
Cybercrime, Auchan Poland bait for an AgentTesla campaign
The doc attachment contacts a link, also used for Lokibot, and downloads the malware. The stolen data is exfiltrated to an email via SMTP.
Syria, Russia freezes joint patrols with Turkey in Kurdistan
Moscow doesn’t want to get involved Ankara-Kurds conflict. Meanwhile, the TAF intensifies raids against the SDF command and control centers and sources of supply.
Cybercrime, new wave of the AgentTesla campaign on Isbank
The message template is identical to the previous one, except for the dates and the name of the attachment: 25_153325_221122_113030.7z. Inside is an exe, the malware, which exfiltrates stolen data via SMTP.
Africa, Togo joins the CIMCT to counter the jihadist threat
Lomé, unable to independently stop the expansion of groups such as the JNIM, asks for help from the Islamic Coalition and pushes for the activation of the MNJTF/AI in the Sahel.
Cyber Warfare, XakNet offensive against the energy sector in Ukraine
Pro-Russian hackers close to the GRU attack institutions, carriers and suppliers with DDoS. The operation is complementary to the Moscow military one: the objectives are shared.
Cybercrime, Alibaba bait of an HTML phishing scam
A fake email points to a page that simulates that of the e-commerce portal. Objective: steal credentials.
Syria, Turkey prepares the ground for the invasion of Kurdistan
TAF attacks continue north of Aleppo and Hasaka. Objective: to weaken the first line of defense of the SDF. Ankara rejects the Russian call for prudence.
Cybercrime, Sharkbot is disguised in Android file managers apps
The apps work as a dropper for the malware and they are downloaded mostly from UK and Italy. The trojan attempts to steal online bank credentials.