Malicious Campaign – TheCyberThrone

Microsoft Azure Environment targeted by malicious campaign

Proofpoint has observed a new malicious campaign targeting dozens of Microsoft Azure environments. The campaign started in November 2023 and is still active, Proofpoint warned in a security advisory published…

PravinKarthik February 12, 2024

Malicious NPM Packages leveraged to steal Information

Researchers from Checkmarx detailed about a threat actor leveraging NPM packages to target developers to steal source code and secrets. Active since 2021, the threat actor has been publishing malicious…

PravinKarthik August 31, 2023

Malicious PyPI resemble VMware vSphere connector

Researchers have identified a malicious PyPI package called “VMConnect” that has been designed to strongly resemble a legitimate VMware vSphere connector module and has been downloaded 237 times. The researchers…

PravinKarthik August 7, 2023

MuddyWater Officially Tied to Iran MOIS 🇮🇷

USCYBERCOM has officially linked to Iran’s Ministry of Intelligence and Security (MOIS). The first MuddyWater campaign was observed in late 2017 when targeted entities in the Middle East. The experts called the campaign…

PravinKarthik January 13, 2022