Un nuevo actor de amenazas afirma haber comprometido a la Tesorería General de la República de Chile 🇨🇱 los datos expuestos parecieran venir de la explotación de una vulnerabilidad de inyección SQL.

Atento Tesorería General de la República, hay algunos usuarios y proveedor, me parece que deben validar.

Some webshells. Dropped by the WSO2 RCE

ghostbin.com/eZsw6

hxxp://185.25.50.239:8080/ #opendir

Watching the shutdown of many conti´s onion sites

#Phishing against Office 365 hosted by DigitalOcean
hxxps://tatacommunicationsltd.com/

Possible real ip behind one of the onion sites in the conti leak
hxxps://185.14.28.109/crpanel/

#Phishing against @rabobank hosted by Namecheap.com
hxxp://deskra-bonl.info/

#Phishing against Golden 1 Credit Union behind cloudflare
hxxps://gholden1.com/

#Phishing against Office 365 hosted by Bluehost
hxxps://persain-co.com/aa/off/

#Phishing against FINN.no hosted by Namecheap.com
hxxps://finnkontrakt.online/payment/

#Phishing against AIB Customer Support hosted by Root Layer
hxxps://login-helpcentre.com/aib/login.php

#Phishing against American Express hosted by Microsoft Support
hxxps://express-locked.com/american/

#Phishing against @creditandorra hosted by Contabo
hxxps://creditando.net/on/Online_e-credit/e-Credit.php

Not surprised about that many users that were in the old trickbot's gitlab site are inside the conti leaks files

#Phishing multi-wallet hosted by Namecheap.com
hxxps://authtxnweebly.com/validate/

#Phishing against Chase Support hosted by CyrusOne
hxxps://jp02sec.com/auth/

#Phishing against ny.gov hosted by Web4Africa
hxxps://nydolsecurity.com/accessclaims/

#opendir server maybe for phishing sites hosted in Russia
C2?: hxxp://45.67.230.104/caller/

#opendir Child site:
hxxs://b04.us/

#OneDrive phishing
hxxps://mcrs.online/Welcome/

Cloned site of an Indian army site: hxxp://jointerritorialarmygov.com/