Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Kaspersky Security Blog

Check Point Research

CVE Database V5

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

The Hacker News

Exploit-DB RSS Feed

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit NetSec

Reddit InfoSec News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A financially motivated cybercrime operation has been identified, targeting users with over 80 spoofed domain names and lure websites. The campaign, which began in September 2024, focuses on government tax sites, consumer banking, age 18+ social media content, and Windows assistant applications. The actors use these domains to deliver Android and Windows trojans, likely for credential theft. The operation employs common techniques such as spoofed domains and lure websites, prioritizing scale and conversion rates over technical sophistication. The most common lures exploit curiosity and desire, making victims less likely to report infections. Users are advised to be cautious when encountering unfamiliar links or download prompts.

The SecuritySnack: 18+E-Crime campaign is a financially motivated cybercrime operation identified by AlienVault, active since September 2024. It uses a large network of over 80 spoofed domain names and lure websites designed to impersonate legitimate government tax portals, consumer banking platforms, adult social media sites, and Windows assistant applications. The primary objective is to distribute trojans targeting both Android and Windows platforms, with a focus on credential theft. The campaign employs common social engineering techniques, including the use of spoofed domains and lure websites that exploit human curiosity and desire, particularly around adult content and financial services. These tactics prioritize scale and conversion rates over technical complexity, indicating a broad, opportunistic approach rather than targeted, sophisticated attacks. The trojans delivered are likely designed to harvest credentials silently, enabling further financial fraud or identity theft. The campaign does not currently have known exploits in the wild beyond these social engineering vectors. The actors’ use of familiar and trusted brand imitations increases the likelihood of victim engagement, while the nature of the lures reduces reporting rates, complicating detection and response efforts. The campaign is tagged with MITRE ATT&CK techniques such as T1566 (phishing), T1587 (resource development), and T1608 (stage capabilities), highlighting its reliance on social engineering and malware delivery. No specific affected software versions or patches are noted, indicating the threat is primarily delivered via user deception rather than software vulnerabilities.

Detailed information about SecuritySnack: 18+E-Crime. Get real-time updates, technical details, and mitigation strategies.

SecuritySnack: 18+E-Crime - Live Threat Intelligence - Threat Radar | OffSeq.com

SecuritySnack: 18+E-Crime

An unknown threat actor has been creating malicious Chrome browser extensions since February 2024, using fake websites to lure users into installing them. These extensions have dual functionality, appearing to work as intended while also connecting to malicious servers to steal user data and execute arbitrary code. The extensions request excessive permissions and use various techniques to bypass security measures. They communicate with actor-controlled API domains, sending encrypted system information and receiving dynamic rules and code. The malicious activities include cookie theft, traffic manipulation, and potential account compromises. Over 100 fake websites and extensions have been deployed, exploiting current trends to attract users. The Chrome Web Store has removed some extensions, but the actor's persistence poses an ongoing threat to users seeking productivity tools and browser enhancements.

Since February 2024, an unknown threat actor has been deploying a widespread campaign involving malicious Chrome browser extensions distributed via over 100 fake websites. These extensions exhibit dual-functionality: they provide legitimate or seemingly useful browser features to avoid suspicion while simultaneously performing covert malicious activities. Upon installation, the extensions request excessive permissions that enable them to access sensitive browser data and system information. They establish encrypted communications with attacker-controlled API endpoints to exfiltrate data and receive dynamic commands and code updates, allowing the malware to adapt and evade detection. The malicious capabilities include stealing cookies, which can lead to session hijacking and account compromises, manipulating web traffic to alter user interactions or inject malicious content, and executing arbitrary code within the browser context. The extensions employ various evasion techniques to bypass Chrome’s security mechanisms and detection by security tools. Despite some removals by the Chrome Web Store, the actor remains persistent, continuously creating new fake websites and extensions that exploit trending topics to lure users seeking productivity tools or browser enhancements. This campaign leverages a broad range of tactics, techniques, and procedures (TTPs) including credential access, system information discovery, command and control communication, and code injection, as indicated by the referenced MITRE ATT&CK techniques (e.g., T1113, T1033, T1114, T1119, T1082, T1071, T1176, T1140, T1555, T1185, T1016, T1059, T1083, T1102, T1573, T1056, T1012, T1132, T1189, T1124). The campaign’s sophistication and persistence pose a significant threat to users and organizations relying on Chrome extensions for daily operations.

Detailed information about Hidden Threats of Dual-Function Malware Found in Chrome Extensions. Get real-time updates, technical details, and mitigation strategi

Title	Severity	Type	Source	Date

Threats Tagged 'lure websites'

Stop chasing alerts. Route them.

Filter Threats

Threats Tagged 'lure websites'

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility