Tag Archives: Abused

Popular project management and collaboration tool Monday.com was forced to disable one of its features after it was abused by a threat actor to send out phishing emails.

The “Share Update” feature allows users to share real-time updates, progress, or important information with team members, or stakeholders. Users can post updates, attach files or images, mention specific team members, and even set up automatic notifications for certain updates. 

A video clip posted to Facebook claims to capture Prime Minister Rishi Sunak being verbally abused while out jogging.

The video, which has been shared thousands of times, is captioned: “Rishi Sunak is reminded of why he doesn’t go on outdoor runs often.”

It shows Mr Sunak on an early morning jog through Westminster with Russ Cook, also known as The Hardest Geezer, who recently completed running the full length of Africa.   

As the pair cross a street on their way towards Buckingham Palace, a voice  can be heard from somewhere offscreen making an abusive comment. Mr Cook gives a thumbs up gesture towards the person making the comment. Mr Sunak glances over but otherwise does not appear to react. 

There is no evidence to corroborate this version of events and…

It’s not uncommon to see free web hosting providers get abused as part of phishing campaigns. IBM X-Force Exchange, in fact, published three indicators of compromise (IoCs) related to such an incident, namely:

• URL: http[:]//direc7890[.]mypressonline[.]com
• Email address: [email protected][.]com
• IP address: 185[.]176[.]43[.]106

The domain mypressonline[.]com leads to a website that offers a way for users to easily add subdomains related to their projects. Screenshot Lookup led us to that particular finding.

As part of our work to bring transparency to Internet usage and help keep users safe from digital threats, we used a combination of WHOIS, IP, and DNS intelligence sources and found:

• 1,460 subdomains under…