Threat Intelligence
Credential harvesting page hosted on GCP serverless project
Conclusion
As Brazil continues to grow in economic and geopolitical significance, it will remain an attractive target for threat actors driven by diverse motivations. The country’s digital landscape is a complex arena, developed and expanded over the years by a convergence of both global and local threats. Global cyber espionage actors from North Korea, the People’s Republic of China (PRC), and Russia as well as multinational cybercriminals pose longstanding threats, and Brazil's domestic cybercriminal market remains a persistent challenge increasing the complexities of this dynamic landscape.To effectively safeguard Brazilian enterprises and users, it is important to understand this unique interplay of threats and adopt a proactive approach to cybersecurity. We hope the analysis and research here helps to inform defenders in Brazil, providing fresh insights for collective defense. At Google, we are committed to supporting the safety and security of online users everywhere and will continue to take action to disrupt malicious activity to protect our users and help make the Internet safe for all. Indicators of Compromise (IOCs)
Host-Based Indicators (HBIs)
Filename | SHA256 | Description |
Question Sheet.pdf | e9841e5c218611add64c07b6d6e8b2f2 a899ee32da2bb0326238b332f34bd045 | Benign PDF delivered in PUKCHONG social engineering activity targeting cryptocurrency firms |
0tiukr.verdelimp.com518.429006. 45528.lnk | 38fad88f0fefb385fdfba2e0be28a1fe6 302387bc4a0a9f8b010cca09836361d | Malicious LNK dropped in PINEAPPLE campaigns |
NFe92759625212697.115112. 62531.lnk | 57a0a64ff7d5ca462fe18857f552ab186 d118a80ecad741be62ee16e500ac424 | Malicious LNK dropped in PINEAPPLE campaigns |
Published: 2024-06-12T14:00:00
© Segmentation Fault . All rights reserved.
Privacy | Terms of Use | Contact Us