GitHub - overwrite00/EMLyzer: Piattaforma open-source di analisi forense delle email per identificare spam, phishing e contenuti malevoli. · GitHub
https://github.com/overwrite00/EMLyzer

contrar.it
Ransomware group called lockbit5 claims attack for contrar.it. The target comes from Italy. We identify this attack with following hash code: 3dd9fd0652b03e629343a82a2a462ca593d18f1ff5e6a0210c08b9bc8ccbd7cb (ID: 31134)Target victim website: N/D

by RansomFeed - https://r.zerozone.it/post/rfujkXVsADVg3DCzE

Gaposa
Ransomware group called thegentlemen claims attack for Gaposa. The target comes from Italy. We identify this attack with following hash code: 4312234e53c9bc8e59c4289e8d4256c895594967c732a3c386beaf12c127a34d (ID: 31112)Target victim website: gaposa.it

by RansomFeed - https://r.zerozone.it/post/VEzZJt4R6kbMqRTh0

Tesla Systems
Ransomware group called anubis claims attack for Tesla Systems. The target comes from Italy. We identify this attack with following hash code: 81e4bdb15a12be48f6a3b262c080285b2b76f897041fb0f56ec4a7a436e19a64 (ID: 31150)Target victim website: N/D

by RansomFeed - https://r.zerozone.it/post/XUg7zEABaaxjgb4tS

defcon5italy.com
Ransomware group called lockbit5 claims attack for defcon5italy.com. The target comes from Italy. We identify this attack with following hash code: a7623f013f20a29107aa134931dcb714cf977d4cc779cd86504d28b18ac7b1c9 (ID: 31142)Target victim website: N/D

by RansomFeed - https://r.zerozone.it/post/7FRJhCKEt106A0TCu

seleniaravenna.it
Ransomware group called lockbit5 claims attack for seleniaravenna.it. The target comes from Italy. We identify this attack with following hash code: 8bde92d931e13b294fa9674ab5200d7a0e4b546b8b5675f71bff9b9fc7fc2dec (ID: 31144)Target victim website: N/D

by RansomFeed - https://r.zerozone.it/post/b7K8JGzdCw8t8DBNP

pegasussrl.com
Ransomware group called lockbit5 claims attack for pegasussrl.com. The target comes from Italy. We identify this attack with following hash code: 67617e6ee6903d0aff647904eabb11ecbcd34dff2ceb1d805a67511d17a01d1d (ID: 31139)Target victim website: N/D

by RansomFeed - https://r.zerozone.it/post/gZxG8EM0KAuV9hqFq

wibeats.it
Ransomware group called lockbit5 claims attack for wibeats.it. The target comes from Italy. We identify this attack with following hash code: 715d372a8c3059012b6e30a933fb34b60d2defdb9b7918cba22fc64ad6fb222e (ID: 31148)Target victim website: N/D

by RansomFeed - https://r.zerozone.it/post/8Mpx7aXfpZerCwMw7

Zanzi
Ransomware group called thegentlemen claims attack for Zanzi. The target comes from Italy. We identify this attack with following hash code: 541b19f4abe0b61a6ccb0240efaa8be7f44fcc8e7119005189ab7fbdc9b2254f (ID: 31117)Target victim website: zanzi.com

by RansomFeed - https://r.zerozone.it/post/5cmA2hnJ3Mj1u7tsZ

milanocavi.com
Ransomware group called lockbit5 claims attack for milanocavi.com. The target comes from Italy. We identify this attack with following hash code: 0d86ece99b6a6a0147245cf9ab01e9c88c6ecb07fcc63a45dd2d5fabacc0b7ef (ID: 31132)Target victim website: N/D

by RansomFeed - https://r.zerozone.it/post/pEA15UwQupp8aphGN

Phishing su Microsoft via device code flow. Automazione e AI ne amplificano la diffusione. Impatto sulla PA italiana
Due giorni fa, Microsoft ha diramato un'allerta globale su una nuova e sofisticata campagna di phishing che sfrutta l'intelligenza artificiale per colpire gli account aziendali. Come CERT-AgID, abbiamo già raccolto prove che confermano come questa minaccia stia prendendo di mira anche la Pubblica Amministrazione italiana.

by CERT-AgID - https://r.zerozone.it/post/8Af3wQWZwFerR1yxz

Sintesi riepilogativa delle campagne malevole nella settimana del 4 – 10 aprile
In questa settimana, il CERT-AGID ha riscontrato ed analizzato, nello scenario italiano di suo riferimento un totale di 117 campagne malevole, di cui 90 con obiettivi italiani e 27 generiche che hanno comunque interessato l’Italia, mettendo a disposizione dei suoi enti accreditati i relativi 2313 indicatori di compromissione (IoC) individuati.

by CERT-AgID - https://r.zerozone.it/post/SPvZvrR42gHyy5VzF

Agenzia delle Entrate – campagna di phishing mirata alle Pubbliche Amministrazioni
Il CERT-AGID ha rilevato una campagna di phishing ai danni dell'Agenzia delle Entrate che mira a carpire le credenziali di accesso degli utenti. Ciò che distingue questa campagna da altre precedenti è che è particolarmente mirata a Pubbliche Amministrazioni, oltre che ad aziende private.

by CERT-AgID - https://r.zerozone.it/post/4XH4rKTQQZabkPvvB

www.sistemigestioneintegrata.eu
Ransomware group called dragonforce claims attack for www.sistemigestioneintegrata.eu. The target comes from Italy. We identify this attack with following hash code: 427c183b1fba074d9479346a998456519878141907c0c580077f156d9fc8dacd (ID: 31322)Target victim website: N/D

by RansomFeed - https://r.zerozone.it/post/CPQVTy6uk4bK4QsPP