Weekly Intelligence
DDW Weekly Highlights in December W1
☑️ S2W DDW Weekly Highlights in December W1
🔍 Sensitive Data on Russian Strategic Missile Geolocation for Sale on Dark Web
• A
post on the Dark Web hacking forum has been idenifited,
claiming to have stolen data from Russia's 'Ministry of Defense
website' and 'Public Service Portal.'
• Threat
actor '0xDrako' disclosed that the compromised data concerning
'Russia's Strategic Missiles' was extracted from the targeted website
✓ List
of compromised data: Russian missile geolocation, information related to
air gap development, confidential documents, vocal interceptions, etc.
• The threat
actor noted sample files will only be shared exclusively
through DM due to security concerns.
• The threat
actor appears to have carried out cyberattacks targeting the EU, Asia, and the
U.S. since November.
🔍 Malaysia Atomic Energy Agency Data Breach Detected; Threat Actor Uses Compromised Data to Threaten Victim
• On
December 3rd, the Malaysia Nuclear Agency's internal information was
uploaded to 'BreachForums.'
✓ List
of compromised data: Employees' emails, personal information, etc.
• Threat
Actor 'Ciph3r' is employing a cyberattack in the form of a 'ransom,'
leveraging the data they possess to demand money from the victim organization's
server administrators, rather than selling it.
• After
joining BreachForums last
November, the threat actor have primarily targeted Southeast Asia.
🔍 Pro-Russian Alleged Telegram Channel Claimed to Hack Electric Vehicle Charging Station in Suwon, South Korea
• On
December 4th, a hijacking video was released on the pro-Russian Telegram
channel 'Z-Pentest.' This video consisted manipulating into the
internal system of an electric vehicle charging station located in Suwon,
Gyeonggi province.
• The
video shows the threat actor manipulating the cell balancing function
of a major South Korean EV. (Cell Balancing: a function that keeps
batteries at optimal state of charge)
• Part
of the message written with the uploaded video is directed to the South Korean
government , demanding to stop financing Kiev,
the capital of Ukraine.
• The
Telegram channel is currently inaccessible.
If you want to read more, follow the newsletter as below and visit S2W Inc. website to contact us.
* The full report is available upon request and for XARVIS subscribers.
