Threat Source newsletter (Feb. 9, 2023): Don't let criminals exploit your empathy
Summary: Cisco Talos warned that criminals will exploit empathy around the Turkey and Syria earthquake through phishing scams, malvertising, and typosquats, and noted that ransomware groups keep rebranding, shutting down, and forming new partnerships as the threat landscape shifts. The newsletter also reported that Dutch national police shut down the criminal messaging service Exclu in a crackdown spanning the Netherlands, Germany, and Belgium that included 79 searches and 42 arrests, and that exploit code was released for an actively exploited zero-day in Internet-exposed GoAnywhere MFT administrator consoles.
Why it matters: Disaster relief appeals are a live lure: any donation link your employees click can be a typosquat or malvertising page built to profit from their kindness. Meanwhile, exploit code is now public for a zero-day in GoAnywhere MFT consoles that are exposed to the internet, and ransomware operators continue to rebrand and regroup faster than defenders can track them.
Read the original at Cisco Talos ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026