Tag: threat intelligence

  • Phishing targeting Commonwealth Bank customers

    Phishing targeting Commonwealth Bank customers

    Security researchers at Shreshta IT, using our threat intelligence platform SDINET, have identified a phishing website targeting customers of the Commonwealth Bank of Australia. About Commonwealth Bank The Commonwealth Bank of Australia (CBA), or CommBank, is an Australian multinational bank with businesses across New Zealand, Asia, the United States, and the United Kingdom. It provides a…

  • Phishing targeting Indiana Department of Workforce Development

    Phishing targeting Indiana Department of Workforce Development

    Threat researchers at Shreshta, have identified a phishing campaign targeting Indiana Department of Workforce Development (DWD) automated self-service Unemployment Insurance system. About Indiana Department of Workforce Development’s (DWD) Uplink is the name of the Indiana Department of Workforce Development’s automated self-service Unemployment Insurance system. The Uplink Claimant Self-Service System enables users to receive improved customer service…

  • LK domain name abused by threat actors

    LK domain name abused by threat actors

    Before we deep dive into how attackers target .lk domains using domain shadowing attack, first, a primer on registration of a domain name under .lk namespace. tl;dr registration of a domain name under .lk namespace is regulated The domain registration policy says the LK registry may ask for documents supporting the request for a domain…

  • Phishing campaign targeting Github

    Earlier this week, on 21st September, GitHub published a blog post – Security alert: new phishing campaign targets GitHub users The gist of it was, On September 16, GitHub Security learned that threat actors were targeting GitHub users with a phishing campaign by impersonating CircleCI to harvest user credentials and two-factor codes. While GitHub itself…

  • Phishing Campaign – Adidas and Nike

    Shreshta threat intelligence team has detected a phishing campaign wherein the threat actors have registered domain names impersonating brands such as Adidas and Nike. Adidas AG is a German multinational corporation, founded and headquartered in Herzogenaurach, Bavaria, that designs and manufactures shoes, clothing and accessories. It is the largest sportswear manufacturer in Europe, and the…