Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

CIRCL OSINT Feed

ThreatFox MISP Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A sophisticated Android backdoor named Android.Backdoor.916.origin is targeting Russian business representatives. The malware, disguised as an antivirus app called 'GuardCB', has extensive surveillance capabilities including intercepting calls, streaming camera footage, stealing data from messaging apps and browsers, and keylogging. Distributed via messenger apps, it requests numerous system permissions and connects to C2 servers for commands. The backdoor can transmit SMS messages, contact lists, call logs, location data, and captured audio/video streams. It uses Accessibility Service to log keystrokes and intercept content from specific apps like Telegram and Chrome. The malware is believed to be used for targeted attacks rather than mass distribution.

The Android.Backdoor.916.origin is a sophisticated spyware backdoor targeting Russian business employees through Android devices. Disguised as a legitimate antivirus application named 'GuardCB', this malware employs extensive surveillance capabilities to compromise victim devices. It is distributed primarily via messenger applications, leveraging social engineering to convince targets to install the malicious app. Once installed, it requests numerous system permissions that enable it to perform a wide range of malicious activities. These include intercepting phone calls, streaming live camera footage, stealing sensitive data from messaging apps such as Telegram and browsers like Chrome, and logging keystrokes using the Android Accessibility Service. The malware also collects and transmits SMS messages, contact lists, call logs, location data, and audio/video recordings back to its command and control (C2) servers, allowing remote operators to monitor and exfiltrate sensitive information in real time. The use of Accessibility Service is particularly notable as it allows the malware to bypass certain Android security restrictions and capture input from targeted applications. The backdoor is designed for targeted espionage rather than mass distribution, indicating a focus on high-value individuals within Russian business sectors. There is no evidence of known exploits in the wild beyond the described infection vector, and no specific affected Android versions have been identified. The malware's command and control infrastructure facilitates continuous remote control and data exfiltration, making it a persistent threat to affected users.

Detailed information about Android backdoor spies on Russian business employees. Get real-time updates, technical details, and mitigation strategies.

Android backdoor spies on Russian business employees - Live Threat Intelligence - Threat Radar | OffSeq.com

Android backdoor spies on Russian business employees

Threats Tagged 'business'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'business'

Lead Pen Test Professional