Tag: threat intelligence

  • LK domain name abused by threat actors

    LK domain name abused by threat actors

    —

    by

    Swapneel Patnekar

    Before we deep dive into how attackers target .lk domains using domain shadowing attack, first, a primer on registration of a domain name under .lk namespace. tl;dr registration of a domain name under .lk namespace is regulated The domain registration policy says the LK registry may ask for documents supporting the request for a domain…

  • Phishing campaign targeting Github

    —

    by

    Swapneel Patnekar

    Earlier this week, on 21st September, GitHub published a blog post – Security alert: new phishing campaign targets GitHub users The gist of it was, On September 16, GitHub Security learned that threat actors were targeting GitHub users with a phishing campaign by impersonating CircleCI to harvest user credentials and two-factor codes. While GitHub itself…

  • Phishing Campaign – Adidas and Nike

    —

    by

    Swapneel Patnekar

    Shreshta threat intelligence team has detected a phishing campaign wherein the threat actors have registered domain names impersonating brands such as Adidas and Nike. Adidas AG is a German multinational corporation, founded and headquartered in Herzogenaurach, Bavaria, that designs and manufactures shoes, clothing and accessories. It is the largest sportswear manufacturer in Europe, and the…