Curated Intelligence

Search This Blog

PODCAST

Get link
Facebook
X
Pinterest
Email
Other Apps

We have a Podcast! Listen Now 👇

Get link
Facebook
X
Pinterest
Email
Other Apps

Threat Group Naming Schemes In Cyber Threat Intelligence

Curated Intelligence members explore threat group naming schemes and why they are important Written by @BushidoToken BLUF All organizations have their own unique access into sets of data and telemetry that other organizations do not. Many organizations create and define their own clusters differently which generates unique threat group candidates Background How the complex task of adversary attribution should be performed is an often debated topic amongst Cyber Threat Intelligence (CTI) analysts from various backgrounds at various organizations. This is because there is no standardized way of doing attribution, but the way it is being done by some organizations is actually is problematic and counterproductive. The Curated Intelligence community are a varied bunch of passionate CTI analysts with years of experience. So naturally, whenever the topic of attribution comes up everyone likes to share their $0.02. This is one of the best parts of our community and leads to great dis...

Tracking Cyber Activity Surrounding War In Israel

Background The Curated Intelligence community is a group of analysts from around the world that tracks the latest updates on the threat landscape. The latest situation Curated Intel has been following is the Hamas terrorist attack against Israel on 7 October 2023. The attack has subsequently resulted in thousands of civilian casualties on both sides and has destabilized the region. As with any modern conflict, cyber activity surrounds it from all nature of groups. The most widely recognised and surface-level type has been hacktivism due to the public announcements by threat actors claiming responsibility for attacks. This often takes on social networking sites, like Telegram and Twitter, among others. There has also been examples of the cybercrime underground exploiting the situation for financial gain. This includes offering databases of stolen data for sale as well as live access to compromised systems. This is typical behaviour for cybercriminals, but it should not be ig...

Curated Intel Threat Report: Multi Platforms Credit Card Information Harvesting Campaign

Introduction Tas ( @tas_kmanager ), in collaboration with Curated Intelligence, shared his research on the newly observed method of phishing utilizing chat functionality in multiple web/mobile applications. Furthermore, he is able to link this campaign to other similar campaigns based on the shared TTPs and IoCs. Background We have recently tracked a connection in global credit card information harvesting campaign targeting user in different postal and e-commerce services. This latest wave of phishing introduced a novel TTP of utilizing the postal, reservation and e-commerce services chat functionality. Earlier in this month, Tas personally received a suspicious message via chat from a hotel merchant in the travel reservation application Booking. Figure 1 - The Chat Message The message itself came from the official account of the hotel merchant, Tas has contacted them before via this method to inquiry information about the hotel room. The message was letting the guests know...

Powered by Blogger