GTFire builds multi-year #phishing campaigns on #Google Translate 3P sites cache-fetch feature & #Firebase backend, giving the illusion of safety. In 2H 2023, we observed active campaigns against targets in the Americas & #EU. In the Q4, TA put increasing efforts in #Asia and #ME. The target list suggests broader agendas. IT service providers (key to #software supply chain attacks), #cybersecurity, and surveillance #tech companies were targeted.
It is nothing but a slightly modified data sample dumped by another TA on the same forum in July 2023 under the name “Chinese customers data - 2023”. Group-IB’s Threat Intel unit established this connection by searching unusual keywords in this data sample posted by #ChinaLeak
I bought some PCB and #raspberrypi from #Penang sent to SG. It’s abt 500KM from me. Yet #FedEx decided to route the parcel via #Guangzhou, taking a 5000KM detour🙄
Usually I’d avoid comments on public policy on Twitter. My utter respect to minister @LawrenceWongST for accurate timeline clarification to a suggestive question. https://t.co/I7ZwxmjSsH
@CryptoInsane Hahahaha. The ads Chinese translation is so poor. No Chinese TA would buy from him🤣 I think he meant “proof/POC could be provided to serious buyers”, yet end up translating to “severe buyer”. Even Google Translate makes more sense.
@selenalarson Refine or sometimes reshape client inquiries. E.g. for most of private sectors, is it less productive request to CTI teams asking will China attack me next month.
@YouTube#OnlineGamblingAds become outrageously ubiquitous now. They’re usually non English, mostly in Chinese and other Asian languages, under the disguise of “marketing”. As far as I know, unregistered gambling are illegal in many Asian countries, if not categorically outlawed.
The #Debian based Chinese operating system #UOS is getting much attention recently. Today, it finds its way into CN gov's procurement list. Interestingly, only 1 of 3 server versions supports #Intel compatible #amd64 instruction set; while all 3 support #arm64 instruction set.
It's tomorrow! Don't miss the presentation of @hfx_sg, Group-IB's senior #threatintel analyst. He will speak about 2020 #cyberthreats in the region. Tune in at 2PM (GMT +8) ->https://t.co/uD8Dkw0GAJ
The last individual insisted race purity had a ridiculous mustache and waged a world war. I’m proudly see across race couples walking on the streets of Singapore. Love is a better social glue than other factors. #sgunited
I just learnt that the most costly part of deplying a cyber intrusion detection system is stuff training, allegedly. Something I didn’t know from a researcher point of view. Interesting brunch talk😂😂😂
SG PM Lee announced that to make our city state's food supply chain resilient, we are now importing eggs from Poland. Next time @hasherezade comes to SG for SAS conference, the poached eggs for your breakfast might taste like home coz indeed they are. 😉
First week after Singapore’s #CircuitBreak ended. Suddenly realize I probably don’t miss the outdoor life that much. Strange. I think the greatest achievement for past two months by far is to get down weight from 82kg to 72kg via regular indoor workouts and almost vegan ish diet.
REvil, true master of showmanship. From #TravelexHack to #TrumpRansom, making public demand in underground forum has been a big part of post-attack actions, combining classic ransom with #Hacktivism. REvil always keeps a copy of victim data which leads to further leakage risks.