January 2021

A newly discovered malware was found to be exfiltrating emails from several organizations, including government organizations, research institutions, and universities in Taiwan. The attackers carried out this operation by injecting a Javascript Backdoor to a popularly used webmail system in Taiwan. The threat actor has no connection with any of the already prevailing attack groups. The attack flow of Earth Wendigo is represented in the image below.  Further investigation revealed

Dark web is engulfed in controversies as it is a hotbed for threat actors to disseminate stolen information as it hosts multiple forums and marketplaces where these actors leak and sell information procured illegally through data breaches. In December 2020, 100GB+ India focused data was leaked. More recently, 200 million+ records of Chinese citizens was

During our routine Dark web monitoring, the Research team at Cyble found multiple posts where the Threat Actors are selling alleged data leaks related to Chinese citizens. The alleged leaks could be related to Gongan County, Weibo, and QQ as shared by the actors in the posts. Sample data of alleged 999 household registrations of