Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Kaspersky Security Blog

Check Point Research

Reddit NetSec

CVE Database V5

AlienVault OTX General

Reddit InfoSec News

SecurityWeek

SANS ISC Handlers Diary

Dark Reading

Threatpost

The Hacker News

Exploit-DB RSS Feed

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A financially motivated cybercrime operation has been identified, targeting users with over 80 spoofed domain names and lure websites. The campaign, which began in September 2024, focuses on government tax sites, consumer banking, age 18+ social media content, and Windows assistant applications. The actors use these domains to deliver Android and Windows trojans, likely for credential theft. The operation employs common techniques such as spoofed domains and lure websites, prioritizing scale and conversion rates over technical sophistication. The most common lures exploit curiosity and desire, making victims less likely to report infections. Users are advised to be cautious when encountering unfamiliar links or download prompts.

The SecuritySnack: 18+E-Crime campaign is a financially motivated cybercrime operation identified by AlienVault, active since September 2024. It uses a large network of over 80 spoofed domain names and lure websites designed to impersonate legitimate government tax portals, consumer banking platforms, adult social media sites, and Windows assistant applications. The primary objective is to distribute trojans targeting both Android and Windows platforms, with a focus on credential theft. The campaign employs common social engineering techniques, including the use of spoofed domains and lure websites that exploit human curiosity and desire, particularly around adult content and financial services. These tactics prioritize scale and conversion rates over technical complexity, indicating a broad, opportunistic approach rather than targeted, sophisticated attacks. The trojans delivered are likely designed to harvest credentials silently, enabling further financial fraud or identity theft. The campaign does not currently have known exploits in the wild beyond these social engineering vectors. The actors’ use of familiar and trusted brand imitations increases the likelihood of victim engagement, while the nature of the lures reduces reporting rates, complicating detection and response efforts. The campaign is tagged with MITRE ATT&CK techniques such as T1566 (phishing), T1587 (resource development), and T1608 (stage capabilities), highlighting its reliance on social engineering and malware delivery. No specific affected software versions or patches are noted, indicating the threat is primarily delivered via user deception rather than software vulnerabilities.

Detailed information about SecuritySnack: 18+E-Crime. Get real-time updates, technical details, and mitigation strategies.

SecuritySnack: 18+E-Crime - Live Threat Intelligence - Threat Radar | OffSeq.com

SecuritySnack: 18+E-Crime

Title	Severity	Type	Source	Date

Threats Tagged 'spoofed domains'

Filter Threats

Threats Tagged 'spoofed domains'

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility