Rewterz

Rewterz Threat Advisory – CVE-2020-17534 – Apache HTML/Java API privilege escalation

January 12, 2021
Rewterz

Rewterz Threat Alert – Dridex Banking Malware

January 12, 2021

Rewterz Threat Alert – Phishing Campaign Impersonating Hotmail Page

Severity

Medium

Analysis Summary

A spear phishing campaign detected targeting Microsoft’s login page luring users to put up their credentials and playing into the hands of threat actors. This has been a common practice by threat actors to impersonate the login page of Microsoft and these type of phishing activities increase at the end of the year as well.

Image

Impact

  • Credential theft
  • Exposure of sensitive data 

Indicators of Compromise

URL

hxxp[:]//myworkingthing.h4bd9098ayhcsascvv.workers.dev/

Remediation

  • Block all threat indicators at your respective controls.
  • Search for IOCs in your environment. 

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.