Resources

All official content published by AI SPERA is gathered in one place. From product updates to reports and case studies, you can explore it all here.

August 9, 2024

Analyzing Quasar RAT Attacks in Home Trading Systems: C2 IP Address Investigation Using Threat Hunting Tools

In this article, we will analyze a recent trend in financial software attacks where Quasar RAT is distributed via personal trading systems, specifically using home trading systems (HTS). We will also examine the IP addresses used in these attacks through threat hunting tools.…

Blog
Analyzing Quasar RAT Attacks in Home Trading Systems: C2 IP Address Investigation Using Threat Hunting Tools

August 8, 2024

[Criminal IP v1.62.0] 2024-08-08 Release Note

An update to Criminal IP v1.62.0 has been released. [Criminal IP v1.62.0] Regular Maintenance and Update Release Note Maintenance Period: 2024.08.08 05:00~10:00 AM (UTC) [New Changes] New API Integration – Maltego Maltego is the all-in-one investigation platform that accelerates…

Release Note
[Criminal IP v1.62.0] 2024-08-08 Release Note

August 2, 2024

Trello Data Breach: Collaboration Tool Exposed to Attacks Due to API Vulnerability

A significant data breach recently impacted Trello, a task management tool by Atlassian, known for its team collaboration software. The personal information of around 15 million Trello users was exposed on the dark web after hackers exploited an API vulnerability. This article…

Blog
Trello Data Breach: Collaboration Tool Exposed to Attacks Due to API Vulnerability

August 1, 2024

Rising Paris Olympic Ticket Scams: How to Prevent Them With AI-Powered URL Scanners

Amidst the intense excitement surrounding the 2024 Paris Olympics, phishing attacks impersonating ticket sales for the Olympics are spreading rapidly. Recently, 708 fake domains were reported to have been involved in a massive Olympics ticket scam and phishing attack primarily…

Blog
Rising Paris Olympic Ticket Scams: How to Prevent Them With AI-Powered URL Scanners

July 24, 2024

Kimsuky Hackers Create Phishing Site Mimicking Korea University: Are They Targeting Entire Research Institutions?

The North Korean hacking group Kimsuky has sparked controversy by reportedly developing a phishing site disguised as the Korea University portal. Upon investigation, this phishing site was found to be an exact replica of the actual Korea University portal page (original site:…

Blog
Kimsuky Hackers Create Phishing Site Mimicking Korea University: Are They Targeting Entire Research Institutions?

July 22, 2024

Unmasking the IP Addresses of the Illegal Webtoon Site ‘Newtoki’ Hidden by Cloudflare

The rapidly growing webtoon market in Korea is plagued by copyright issues due to the proliferation of illegal webtoon sites. Even when discovered and shut down, these sites quickly reappear under new domains, often hosted overseas to evade law enforcement. Screen of the illegal…

Blog
Unmasking the IP Addresses of the Illegal Webtoon Site ‘Newtoki’ Hidden by Cloudflare

July 18, 2024

Brickstream’s ‘Authentication-Less’ People Counting System Leaves Camera and Settings Pages Unprotected

The use of people counting systems for business and marketing purposes is increasing across various industries. One such product is Teledyne FLIR’s Brickstream 3D Gen 2, which tracks customer movements by measuring traffic volume, visitor flow, dwell time, etc., and provides…

Blog
Brickstream’s ‘Authentication-Less’ People Counting System Leaves Camera and Settings Pages Unprotected

July 15, 2024

Open-Source Supply Chain Attacks: Case Studies of Malicious NuGet and npm Packages

Recently, supply chain attacks through malicious packages hidden in open-source repositories have become a significant issue in the cybersecurity industry. The open nature of these repositories, allowing anyone to freely distribute and install packages, makes them an attractive…

Blog
Open-Source Supply Chain Attacks: Case Studies of Malicious NuGet and npm Packages

July 11, 2024

[Criminal IP v1.60.1] 2024-07-11 Release Note

An update to Criminal IP v1.60.1 has been released. [Criminal IP v1.60.1] Regular Maintenance and Update Release Note Maintenance Period : 2024.07.11 05:00~10:00 AM (UTC) [New Changes] New API Integration – Hybrid Analysis Hybrid Analysis is a leading automated malware analysis…

Release Note
[Criminal IP v1.60.1] 2024-07-11 Release Note

July 10, 2024

[Fraud Detection Statistics] When Is Online Fraud Most Prevalent During the Day?

This FDS case study aims to analyze fraud detection statistics based on real FDS data and determine when online fraud is most likely to occur. Thieves in Broad Daylight? Illustration of a thief active at nigh When you search for images of thieves on the internet, you often see…

Blog
[Fraud Detection Statistics] When Is Online Fraud Most Prevalent During the Day?

July 5, 2024

Privacy Breach: ID and Personal Information Exposed in KYC Systems

What is KYC? Recently, KYC (Know Your Customer) has become a mandatory requirement not only in the financial sector but also for cryptocurrency exchanges. KYC is a procedure for verifying the identity of customers to confirm that they are indeed the owners of their accounts.…

Blog
Privacy Breach: ID and Personal Information Exposed in KYC Systems

July 4, 2024

Polyfill Supply Chain Attack: Malicious Code Injected Into More Than 100,000 Domains

Polyfill is an open-source library that supports older browsers, and Polyfill.js is an open-source JavaScript source used by more than 100,000 sites worldwide. Recently, the domains using Polyfill.js were identified to have been exposed to malware attacks. This article will…

Blog
Polyfill Supply Chain Attack: Malicious Code Injected Into More Than 100,000 Domains

Business Customer Reports

Experienced any inconvenience?

Let us know right away.

Contact US

Join AI SPERA

Be part of the AI SPERA journey.

Contact US