The new wave of attacks on Iranian organizations: the release of infected files through the mirror links of the Soft98 website

https://news.amnpardaz.com/1404/10/17868/%da%a9%d9%85%d9%be%db%8c%d9%86-%d8%ac%d8%af%db%8c%d8%af-%d8%a8%d8%af%d8%a7%d9%81%d8%b2%d8%a7%d8%b1%db%8c-%d8%a7%d8%b3%d8%aa%d9%81%d8%a7%d8%af%d9%87-%d8%a7%d8%b2-soft98-%d8%a8%d9%87%d8%b9/

Reverse-engineering the Yamaha DX7 synthesizer's sound chip from die photos http://www.righto.com/2021/11/reverse-engineering-yamaha-dx7.html?m=1

TAKBET data breach
@webamoozir may like it :)

Attribution base on IP address is bad idea

Here is cool report about UAE APT , "Stealth Falcon".

https://research.checkpoint.com/2025/stealth-falcon-zero-day/

🤔
Gemini ?

#Venezuela
any professional security guy from Venezuela?
i'm looking for any technical details about following cyber incidents.

1- BGP Anomalies
2- Petróleos de Venezuela (PDVSA)


plz send a direct message i'm open to cooperate and TI sharing.

Unknown Threat Actor targeted IRIB

details from investigation show that they (likely) targeted online platform "Smarters IPTV" , which is online commercial TV streaming platform ( No one pay 16$ for channels they can access free such a wise choose for targeting 😐 ).

Starlink Star-Earth Asset Collection and Detection Framework Seestar and Starlink Star-Earth Intelligence Data Collection

https://mp.weixin.qq.com/s?__biz=MzkwNjM4NTg4OQ==&mid=2247495727&idx=1&sn=30b9ff98d3f76c09882ff922aa2b5f57

The CTI team at Graph Inc. has successfully identified and tracked a large-scale campaign leveraging a supply chain attack, which spreads globally through the compromise of mirror websites and the poisoning of trusted Git repositories, backed by a large and well-structured infrastructure, multiple malware families, and advanced infostealer techniques.

The campaign represents a new level of operational maturity, combining:
- Compromised legitimate websites & GitHub repositories
- Cross-platform malware delivery at scale
- Credential, document, browser data, and access-token theft
- Evasion techniques designed to bypass traditional security controls
#apt #iran #hacking #malware #github #threathunting #threatintel

according to Coincap around 1 billion dollars being blocked by tether company !


following addresses are leaked and publicly available,this wallet addresses are related to Iran Central bank , even with small trace you can reach final node of this money flow which leads to Iran local crypto exchanges ! it's so scary Iran Gov still relay on Emirati companies to bypass sanctions, aren't they an ally to Israel ?

TBaxHwoXQjAmiNZgRKECoA3b6fsrtmoZvB
THwJSxR9qREsgEQjX1cpRw4Rw9WbmPSHVh

source : link