Major Incidents or Breaches

  • PornHub has suffered a data breach in which hackers stole data belonging to millions of users. The attackers are reportedly using the stolen information for extortion purposes.

Notable Threat Actor Activity

  • The Iranian APT group Infy (also known as Prince of Persia) has resurfaced after nearly five years of inactivity. New malware activity attributed to Infy has been observed targeting victims in Sweden.
  • RansomHouse ransomware-as-a-service operators have upgraded their encryption techniques, moving from a single-phase linear approach to a more complex, multi-layered data processing method.
  • The U.S. Department of Justice has indicted 54 individuals involved in a large-scale ATM jackpotting scheme. The conspiracy utilised Ploutus malware to compromise ATMs and steal millions of dollars.

Newly Discovered Vulnerabilities

  • Cisco has disclosed a zero-day vulnerability for which there is currently no available patch.

Trends, Tools, or Tactics of Interest

  • RansomHouse’s enhancement of its encryptor to a multi-layered data processing model indicates a trend toward increased sophistication in ransomware encryption techniques.

Regulatory or Policy Developments Affecting the Security Industry

  • The U.S. Department of Justice’s action against the ATM jackpotting scheme demonstrates ongoing law enforcement efforts targeting cybercrime operations involving malware and large-scale financial theft.