DDW Weekly Highlights in April W1
2024.04.12
☑️ S2W DDW Weekly Highlights in April W1
⚠️ Dark Web Leak Exposes US Military Secrets: Data Linked to Air Force and Navy
• On April 1st, internal data related to the US military was posted on BreachForums, a well-known hacking forum.
• Threat actor 'IntelBroker' on the forum claimed that the leaked data includes internal information of the US Air Force and Navy, supported by four sample files posted as images containing presumed source code.
• The threat actor, operating under the alias 'Cyber Niggers', has a history of leaking data from various institutions, including US educational and financial institutions.
⚠️ Newly detected Korean dark web community, suspected to have emerged earlier this year, has surfaced within S2W's monitoring.
• Newly detected Korean dark web community, suspected to have emerged earlier this year, has surfaced within S2W's monitoring.
• Dubbed AssGuard, the community primarily employs Korean for communication and operates as a dark web platform with an estimated 3,000 postings thus far.
• Key focal points of this community, evident from board titles, encompass drug trading, Telegram channel promotion, pornography dissemination, and boards dedicated to sharing personal user information.
⚠️ BreachForums, a dark web hacking forum, featured an advertisement offering access to Pakistan's police internal systems.
• On April 4th, BreachForums, a dark web hacking forum, featured an advertisement offering access to Pakistan's police internal systems.
• The threat actor, identified as MustardMan, showcased screenshots of the system, suggesting potential access to sensitive criminal records and police documentation.
• Transactions are facilitated through Monero, a cryptocurrency prized for its anonymity, with prices hovering around 150,000 Korean Won.
If you want to read more, follow the newsletter or visit S2W Inc. website to contact us.
Attachments
Intelligence Blogs
Ransomware Resurgence: A Deep Dive into 2023’s Threatscape and Risk Assessment
2024.04.09
Previous
Intelligence Blogs
The XZ Backdoor issue triggered by one untrusted maintainer
2024.04.17
Next