Observed JavaScript-based Malware Activity
SGI observed low-severity malware activity from a Google-hosted IP. Analysis reveals potential JavaScript framework usage. Review IoCs, detection rules, and hardening.
Compromised SSH Authorized Keys: Analysis of a Recent Campaign
SGI observed malicious activity involving modification of SSH authorized keys. Attackers aim to gain unauthorized access to systems. Immediate action is crucial.
Compromised SSH Keys via Web-Delivered Payload
SGI observed a low-severity threat actor attempting to inject unauthorized SSH keys, potentially leading to unauthorized access. Immediate action is recommended.
Compromised SSH Keys via Redirected Home Directories
SGI observed a low-severity threat involving a malicious 'authorized_keys' file originating from Russia, targeting multiple usernames via home directory redirection.