Cyble Chronicles: Jan 18 Cybersecurity Findings & Tips

This bulletin reports multiple concurrent threats: a memory-resident Azorult info-stealer campaign distributed via obfuscated shortcuts and PowerShell loaders; a Go-based stealer variant targeting the Indian Air Force via lnk/ISO delivery and exfiltrating credentials (using Slack); a critical GitLab vulnerability (CVE-2023-7028) that can redirect password resets and enable account takeover; and claims by the 'dawnofdevil' actor of massive breaches and sale of PII affecting millions—collectively indicating active, high-impact malicious activity against both civilian and defense targets.