Research Center

The threat actor known as “Hagga,” first identified in the latter part of 2021,¹ has been using Agent Tesla to steal sensitive user information for some time now. Published reports have identified several indicators of compromise (IoCs)² believed to be part of Hagga’s criminal infrastructure.

Fake beauty products have proliferated through illicit websites and social platforms¹, putting people and brands in danger. Counterfeit products may contain harmful products, and victims may end up suing the impersonated brands, according to Cosmetics Business².

A recently discovered banking Trojan¹ that can restart its malicious routine was delivered using two cybersquatting domains targeting BBVA, a Spanish multinational financial services firm. The malware is aptly named “Revive” and can intercept one-time passwords (OTPs) and all other messages received on the infected device.

KrotReal, identified as the infamous Koobface Gang’s bot master, is seemingly back in business.¹ But instead of going after social media users, is he now targeting adult content viewers?

Cartier recently decided to beef up its efforts in hopes of taking down sites and pages selling knock-offs of its products.¹

Are other luxury jewelers² and their customers at risk of the same threat? We sought to answer this and more with our in-depth analysis of potential look-alike domains and subdomains peddling counterfeit goods.

The infamous Koobface Gang¹ is possibly causing malware mayhem again. After Facebook and cybersecurity researchers unmasked the perpetrators back in 2012, the gang members shut down their servers in a bid to avoid capture.²

NotPetya first saw light in June 2017, shortly after Petya’s emergence. NotPetya was believed to have caused organizations worldwide US$10 million in damages.¹

Aoqin Dragon may not be as foolproof as it seems. Despite evading discovery for almost a decade,¹ cybersecurity researchers shed some light on the advanced persistent threat (APT) group’s inner workings.