January 2021

The Scottish Environment Protection Agency (SEPA) confirmed that it was recently attacked by a ransomware on Christmas Eve, 2020. The environmental regulator and national flood risk management authority confirmed that some of its internal systems, contact center, and other internal communications were compromised by this attack.   SEPA already started the recovery process by isolating the affected systems. SEPA is working closely with Scotland Police and Scottish Government agencies on

The Patchwork APT group, also known as Dropping Elephant, Chinastrats, Monsoon, Sarit, Quilted Tiger, APT-C-09, and ZINC EMERSON, was first discovered in December 2015. This cyber espionage group targets multiple high-profile Diplomats and economists having foreign relations with China, using a custom set of attack tools. The attacks were generally made through spear phishing campaign or watering hole attacks. This group is suspected to be run by an India based threat actor targeting foreign embassies and diplomatic offices in Pakistan, Sri-Lanka, Uruguay, Bangladesh, Taiwan, Australia, and the U.S. At the beginning of 2018, researchers discovered that the Patchwork APT group was also operating spear phishing campaigns

Recently, in the course of our routine Darkweb monitoring, our researchers found an alleged leak of 500K+ records of C-level individuals on an active Russian-speaking forum. The screenshot attached below showcases the post from the forum.  The image below showcases the recent post by the threat actor. Upon analysis of the data, Cyble discovered that there are 500K+ lines of records containing prominent user profiles. The information contains email IDs, password hashes, addresses, etc.   At Cyble, we have promptly