Major Incidents or Breaches

  • Hackers stole millions of PornHub users’ data for extortion purposes.
  • The U.S. Department of Justice indicted 54 individuals for a multi-million dollar ATM jackpotting scheme involving the use of Ploutus malware.

Newly Discovered Vulnerabilities

  • Cisco disclosed a zero-day vulnerability for which no patch is currently available.

Notable Threat Actor Activity

  • The Iranian Infy (aka Prince of Persia) APT group has resurfaced after nearly five years of inactivity, exhibiting new malware activity.

Trends, Tools, or Tactics of Interest

  • Android malware operations are increasingly merging the use of malicious dropper apps with SMS theft and remote access trojan (RAT) capabilities at scale, as seen in campaigns distributing the Wonderland SMS stealer.
  • RansomHouse ransomware-as-a-service has upgraded its encryptor, moving from a single-phase linear technique to a multi-layered data processing method, enhancing the complexity of its encryption process.