Tag: phishing

  • Phishing targeting Indiana Department of Workforce Development

    Phishing targeting Indiana Department of Workforce Development

    Security researchers at Shreshta IT, using our threat intelligence platform SDINET, have identified a phishing targeting Indiana Department of Workforce Development (DWD) automated self-service Unemployment Insurance system. About Indiana Department of Workforce Development’s (DWD) Uplink is the name of the Indiana Department of Workforce Development’s automated self-service Unemployment Insurance system. The Uplink Claimant Self-Service System enables…

  • LK domain name abused by threat actors

    LK domain name abused by threat actors

    Before we deep dive into how attackers target .lk domains using domain shadowing attack, first, a primer on registration of a domain name under .lk namespace. tl;dr registration of a domain name under .lk namespace is regulated The domain registration policy says the LK registry may ask for documents supporting the request for a domain…

  • Phishing campaign targeting Github

    Earlier this week, on 21st September, GitHub published a blog post – Security alert: new phishing campaign targets GitHub users The gist of it was, On September 16, GitHub Security learned that threat actors were targeting GitHub users with a phishing campaign by impersonating CircleCI to harvest user credentials and two-factor codes. While GitHub itself…

  • Phishing Campaign – Adidas and Nike

    Shreshta threat intelligence team has detected a phishing campaign wherein the threat actors have registered domain names impersonating brands such as Adidas and Nike. Adidas AG is a German multinational corporation, founded and headquartered in Herzogenaurach, Bavaria, that designs and manufactures shoes, clothing and accessories. It is the largest sportswear manufacturer in Europe, and the…