Business Customer Reports
Experienced any inconvenience?
Let us know right away.
Resources
All official content published by AI SPERA is gathered in one place. From product updates to reports and case studies, you can explore it all here.
November 19, 2024
How to Detect IP Camera Hacks and Diagnose Your IP Address With Criminal IP
This article explores how to check for IP camera hacking threats linked to your IP address. Internet-connected IP cameras are widely used in homes, businesses, and healthcare facilities for their convenience, enabling users to view live or recorded footage anytime through mobile…
November 18, 2024
Exposed Admin Panel of a National Information Society Agency: an ASM Perspective
A recent security breach at South Korea’s National Information Society Agency (NIA), a key organization specializing in AI and information technology, exposed an admin panel in its system. Source code was leaked from several government agencies managed by NIA, including the…
November 13, 2024
CVE-2024-10443: Over 1.4 Million Synology Devices Exposed to Zero-Click Vulnerability
A newly discovered vulnerability, CVE-2024-10443, has been found in Synology’s NAS (Network Attached Storage) systems. This zero-click vulnerability allows attackers to execute malicious code remotely without user interaction, posing a severe security threat. The CVE-2024-10443…
November 8, 2024
CVE-2024-37383 Roundcube Webmail Vulnerability Targeting Government Agencies
A critical security vulnerability (CVE-2024-37383) has been identified in the Roundcube webmail platform. This vulnerability allows attackers to steal user credentials, potentially opening new phishing attack vectors. Initially reported as targeting government agencies in the…
November 7, 2024
[Criminal IP v1.67.1] 2024-11-07 Release Note
An update to Criminal IP v1.67.1 has been released. [Criminal IP v1.67.1] Regular Maintenance and Update Release Maintenance Period: 2024.11.07 05:00~10:00 AM (UTC) [New Changes] New API Integration – Wazuh Wazuh is an open-source platform offering unified security monitoring,…
![[Criminal IP v1.67.1] 2024-11-07 Release Note](/_next/image?url=https%3A%2F%2Fi0.wp.com%2Fblog.criminalip.io%2Fwp-content%2Fuploads%2F2024%2F11%2Fv1.67.1-release-note-1.png%3Ffit%3D1096%252C620%26ssl%3D1&w=3840&q=75)
November 1, 2024
Over 900,000 DrayTek Routers Still at Risk One Month After Critical Vulnerability Disclosure
On October 2, 2024, Forescout Research reported a significant vulnerability affecting DrayTek routers, which gained popularity as affordable VPN-enabled devices during the pandemic. When the vulnerability was initially discovered, multiple global media outlets noted that around…
October 31, 2024
Cybersecurity Awareness Month 2024: A Look Back on This Year’s Issues
Cybersecurity Awareness Month 2024 concludes today, October 31. In 2004, the United States government designated October as ‘Cybersecurity Awareness Month’ in response to growing cyber threats, aiming to promote global cybersecurity awareness and strengthen security measures.…
October 25, 2024
MeshAgent Deployed by Russia-Targeting Hacking Group ‘Awaken Likho’: Threat Hunting for Infected Servers
According to a Kaspersky report, the APT hacking group Awaken Likho launched a new attack campaign between June and August 2024, targeting Russian government agencies and industries. In this campaign, the hacking group Awaken Likho employed MeshAgent on the legitimate…
October 17, 2024
[Criminal IP v1.66.1] 2024-10-17 Release Note
An update to Criminal IP v1.66.1 has been released. [Criminal IP v1.66.1] Regular Maintenance and Update Release Maintenance Period: 2024.10.17 05:00~10:00 AM (UTC) [New Changes] Added GitHub References New repositories have been added to the Criminal IP Official GitHub list.…
![[Criminal IP v1.66.1] 2024-10-17 Release Note](/_next/image?url=https%3A%2F%2Fi0.wp.com%2Fblog.criminalip.io%2Fwp-content%2Fuploads%2F2024%2F10%2F%25ED%258C%25A8%25EC%25B9%2598%25EA%25B3%25B5%25EA%25B3%25A0_%25EC%2598%2581%25EB%25AC%25B8-4.png%3Ffit%3D1096%252C620%26ssl%3D1&w=3840&q=75)
October 11, 2024
CCTV Server Security: Countering CCTV Camera Exposure Threats With Threat Intelligence
The South Korean military recently withdrew around 1,300 military CCTV (Closed-Circuit Television) cameras due to potential infection with Chinese malware. Exposure of video footage in national institutions such as military facilities poses a very serious security threat that…
October 7, 2024
ClickFix: Beware of a New Threat Exploiting Copy-Paste and Fake Error Messages
The Criminal IP team recently uncovered a new attack, dubbed ClickFix, while analyzing frequent cyber threats. You may have encountered fake pop-up messages with the message, “Your iPhone has been hacked!” while browsing the internet on your mobile device. This is a form of…
October 4, 2024
What Is Malvertising? An Analysis of the Attack: “Slack Advertisement Leading to Malware Download”
A recent Malwarebytes Labs threat report analyzed a malicious Slack advertisement, that employed a malvertising attack technique. In this article, we will examine the Slack malvertising attacks covered in the report and analyze them using the discovered indicators of compromise…
Join AI SPERA
Be part of the AI SPERA journey.
