Cyber Espionage, here it comes Dark Pink
Group-IB cybersecurity experts: The APT is targeting mostly the APAC region. It exploits new TTPs, custom toolkit-malware and two core techniques.
Syria, the Islamic State loses 170 members in one fell swoop
The SDF and Inherent Resolve "Jazeera Thunderbolt" operation in Tel Hamis, Tel Barak and Al-Hol (Al-Hawl) aims to annihilate the operational capacity of the pro-ISIS jihadists in the area.
Cybercrime, double failed malware campaign via PO
The emails contain an xls which, using the Equation Editor, contacts a url and downloads the final payload. However, the exe is unreachable.
Syria, Hezbollah opens a new drug factory in Deir Ezzor
The pro-Iran militiamen, after Jordan has increased controls, are looking to new "ready" and less risky markets such as Iraq.
Cybercrime, RFQ from Turkey carries AgentTesla and zgRAT
The zip attachment contains an exe file: the first malware, which downloads the second. The stolen data is exfiltrated via SMTP.
Cybercrime, StrRAT e Ratty distributed as polyglots or JAR files
Deep Instinct cybersecurity experts: Victims receive a file, the malware, that is both a valid MSI and a valid JAR.
Mozambique, ISCAP recruits youth in Cabo Delgado with false job offers
Pro-ISIS jihadists promise high pay. Then, they threat the victims with death. The practice is repeated in Tanzania and South Africa.
Syria, pro-Iran militias in Deir Ezzor adopt a new strategy
Hezbollah and the IRGC train local tribal leaders and enroll young men. Objectives: improve protections from pro-ISIS militiamen and attack the Inherent Resolve bases from the SDF territories.
Cybercrime, Remcos campaign via DBatLoader
The rar attachment contains an exe: the loader, which contacts a url and downloads the final malware.
US-Iran war at sea on illegal arms supplies to the Houthis intensifies
New seizure of weapons for Yemen: over 2,000 Kalashnikovs aboard a dhow, stranded in the Gulf of Oman. Escalation of operations and IRGC disruptive actions.