✕

Rewterz Annual Threat Intelligence Report 2025 - Download Now

Request a Demo
Rewterz

Rewterz Threat Alert – APT-C-23 aka AridViper – Active IOCs

May 31, 2021
Rewterz

Rewterz Threat Advisory – CVE-2021-33623 – Node.js trim-newlines module denial of service

June 1, 2021

Rewterz Threat Advisory – Threat Actors Targeting Employees Post Lockdown

Severity

Medium

Analysis Summary

The organizations welcoming back workers are enacting testing programs and workplace rules to guard against COVID-19 infections. To prepare employees, many companies are offering webinars and training videos to explain the new rules and requirements. Of course, cybercriminals are aware of this trend and are actively exploiting it. The attackers are deploying emails and malicious files masquerading as COVID-19 training materials. One particular email tries to trap the recipient into signing up for a phony employee training seminar. Clicking the link in the email actually leads the person to a malicious website designed to capture their Microsoft credentials.

Impact

  • Data exfiltration
  • Credential theft
  • Exposure of sensitive data

Remediation

  • Block the threat indicators at their respective controls.
  • Do not click on URLs and files attached in untrusted emails.
  • Do not download software from random sources on the internet.
  • Keep all software upgraded to latest patched versions.

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo