Tag
Disruption of High-Volume Phishing Ecosystem Targeting Japanese Entities
2 TTPsA coordinated disruption action targeting the CoGUI, CoAceV, and CoFish_Ws phishing kits has impacted an ecosystem responsible for billions of malicious messages harvesting credentials and payment data from global organizations.
Host Header Injection in Sylius Password Reset Mechanism
3 TTPs 1 CVESylius versions before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2.2.9 are vulnerable to a password reset poisoning attack, allowing unauthenticated attackers to hijack administrator accounts via Host header manipulation.
Casbaneiro Banking Trojan Campaign in Latin America
2 TTPsA Casbaneiro banking trojan campaign is actively targeting Latin American users by leveraging geofencing and distributed infrastructure to hinder analysis and detection.
Large-Scale AI-Assisted Business Email Compromise Campaign
2 TTPsThreat actors are executing a massive business email compromise campaign utilizing AI-generated templates and layered social engineering to deceive finance departments into initiating fraudulent ACH payments.
Unauthenticated Stripe Credential Overwrite in WordPress Event Tickets Plugin
1 TTP 1 CVEThe Event Tickets and Registration plugin for WordPress (v5.27.4 and earlier) contains an authorization flaw in the Stripe OAuth return endpoint, allowing unauthenticated attackers to hijack site payment processing.
Breeze Comet Targeting Brazilian Financial Systems
3 TTPs 1 IOCBreeze Comet is a financially motivated actor targeting Brazilian payment systems via social engineering, web shell deployment, and custom routing malware to execute fraudulent financial transactions.