Threat Intelligence Snapshot: Week 12, 2024

Surge in Read Teaming Malicious Use Cases for AI

The anticipated surge in malicious AI utilization, particularly in crafting targeted deepfakes and orchestrating influence operations, is set to significantly lower the financial and technical barriers for conducting disinformation campaigns. This trend facilitates the development of evasion-capable malware, thereby broadening the spectrum of threat actors capable of executing sophisticated malicious campaigns with reduced technical skill prerequisites.

Rollups

Industry impacted: Government

• Researchers Identify Google Sites as Vector in Azorult Malware Spread

• Earth Krahang Targets Governments in Sophisticated Cyber Espionage Campaign

• New And Evasive Method Of Delivering NetSupport RAT

• Threat actors leverage document publishing sites for ongoing credential and session token theft

• New Data-Wiping Malware Variant Targets Linux Systems

• Misconfigurations in Firebase Expose 19 Million Plaintext Passwords and More Than 125 Million Sensitive User Records