Threats - Rewterz

September 13, 2019

Rewterz Threat Alert – NetCat – Intel Server CPUs Side Channel Vulnerability

Severity Medium Analysis Summary A side-channel vulnerability has been discovered in Intel Server CPUs that exploits the network performance-enhancing capabilities of recent Intel server CPUs. The […]

September 12, 2019

Rewterz Threat Alert – Thrip Continues To Hit High Level Targets In South Asia

Severity High Analysis Summary Thrip group, the stealthy China-based espionage group has continued to mount attacks in South East Asia, hitting military organizations, satellite communications operators, […]

September 12, 2019

Rewterz Threat Alert – GandCrab Ransomware – IoCs

Severity Medium Analysis Summary Since GandCrab ransomware is being sold as Ransomware-as-a-service (RAAS), fresher campaigns have emerged distributing the ransomware. The ransomware has been used by […]

September 12, 2019

Rewterz Threat Alert – Fake Microsoft Login Page Hidden by Captcha to Evade SEGs – IoCs

Severity Medium Analysis Summary Indicators of Compromise have been identified for a campaign using captcha boxes to hide a fake Microsoft account login page from secure […]

September 11, 2019

Rewterz Threat Alert – BITTER – Targeted Attack Against Pakistan

Severity High Analysis Summary A strain of attacks that appear to target Pakistani nationals. We named the attack “BITTER” based on the network communication header used […]

September 11, 2019

Rewterz Threat Alert – Pony Loader Malware Targets Users in China

Severity Medium Analysis Summary A new Pony Loader campaign that targets potential visitors of the Canton Fair based in Guangzhou, China. The initial infection sources from […]

September 11, 2019

Rewterz Threat Alert – Heatstroke Phishing Campaign

Severity Medium Analysis Summary A new multistage phishing attack dubbed “Heatstroke” and how it may differ from other phishing campaigns. The attackers apparently do research on […]

September 6, 2019

Rewterz Threat Alert – Winnti Malware 4.0 Exploits Vulnerabilities in Linux and Windows

Severity Medium Analysis Summary The Winnti Malware is being used by APT groups such as the Chinese APT41 to launch cyber attacks. Winnti malware is installed […]

September 6, 2019

Rewterz Threat Alert – Spam Campaign Abuses PHP Functions for Persistence, Uses Compromised Devices for Evasion and Intrusion

Severity Medium Analysis Summary A spam campaign that uses compromised devices to attack vulnerable web servers. After brute-forcing devices with weak access credentials, the attackers use […]