Rewterz Threat Alert – Nanocore – IoCs
January 4, 2021Rewterz Threat Advisory – Linux Kernel Privilege Escalation
January 5, 2021Severity
Medium
Analysis Summary
Threat actors are targeting users via phishing emails asking them for their credentials in lure of $10.2 million as a gift and that too without any fees and charges. These type of emails are common at the end of the year and at the start of the new year where the users are mostly busy in buying with their credit cards and online shopping. Threat actors find these opportunities to lure users in with discounts and with gift vouchers so that the victims can enter their credentials and threat actors can use them for their gain.
Impact
- Credential theft
- Exposure of sensitive data
- Financial loss
Indicators of Compromise
Email Subject
ATTENTION!!
From Email
frankmr617@gmail[.]com
Remediation
- Block all threat indicators at your respective controls.
- Always be suspicious about emails sent by unknown senders.
- Never click on links/attachments sent by unknown senders.