HOSTKEY Detects Cryptojacking Activity on Gitea Server
HOSTKEY, a hosting provider, alerted a customer to excessive CPU usage on their virtual server, leading to the discovery of a cryptojacking…
Category: Cyber Service Providers
MSSPs, MDR providers, incident response firms and cybersecurity service providers.
Supabase Abused as Remote Switch in Malicious Extensions
Seven malicious Firefox extensions use threat actor-controlled Supabase projects to dynamically serve phishing or decoy content, abusing the platform's infrastructure.
API-Sports Credential Shared in Malicious Extensions
The 37 sports-score shell extensions share a hard-coded credential for API-Sports, a legitimate sports data service, indicating coordinated infrastructure.
Cloudflare Workers Used for Data Exfiltration
Fifteen malicious Firefox extensions exfiltrate wallet secrets through Cloudflare Workers, leveraging the service for data theft.
Twilio: TURN Relay Service Abused by msaRAT
msaRAT uses Twilio TURN relays to establish WebRTC DataChannels between the browser and C2 server.
AstrillVPN: VPN Service Used by Suspected DPRK Operatives
AstrillVPN is a VPN service whose exit nodes were identified in the investigation as part of the infrastructure used by suspected DPRK…
Vultr: Cloud Infrastructure Provider
Vultr is a cloud infrastructure provider that was used to host the fake crypto startup's infrastructure in the undercover operation. The researchers…
Gorilla Servers: Hosting Provider Used in Undercover Operation
Gorilla Servers is a hosting provider that was used in the undercover operation to host infrastructure. The researchers noted that the operatives'…
Bugcrowd: Crowdsourced Security Platform
Bugcrowd is a crowdsourced security platform that facilitated the disclosure of the RovoBlast vulnerability in Atlassian Rovo. The platform rated the issue…
Poison Claude: Discounted AI Access with Privacy Risks
Poison Claude is an underground service selling discounted access to Anthropic's Claude models. It operates as a proxy, giving the operator full…