Cybercriminals Spreading Node.js Trojan Promising Relief from the Outbreak of COVID-19
A java downloader going by the extension “Company PLP_Tax relief due to Covid-19 outbreak CI+PL.jar” has been recently detected. Drawing...
Month: May 2020
Evilreg – Reverse Shell Using Windows Registry Files (.Reg)
Reverse shell using Windows Registry file (.reg).Features:Reverse TCP Port Forwarding using Ngrok.ioRequirements:Ngrok Authtoken (for TCP Tunneling): Sign up at: https://ngrok.com/signupYour...
URLBrute – Tool To Brute Website Sub-Domains And Dirs
What is thisURLBrute is a tool to help you brute forcing website sub-domains and dirs.Can be used with python3 and...
Ramsay spy framework built to subvert air-gapped defenses
Air-gapped networks aren’t easily compromised, but they don’t offer perfectly air-tight security either. Leveraging insider threats, infecting flash drives and...
The database of Russian car owners is sold for bitcoins
According to the description of the database, it contains 129 million leads obtained from the traffic police register. This is...
Samsung and SK Telecom Unveil World’s First Quantum Security Tech 5G Smartphone
The two companies have recently revealed the world's first QRNG (Quantum Random Number Generator) 5G smartphone. The smartphone is named...
Rise of a Mobile Banking Malware Which Steals Personal Financial Information
The federal cybersecurity agency cautions about the rise of a new mobile banking malware called "EventBot", which purportedly steal personal...
Getdroid – FUD Android Payload And Listener
FUD Android Payload And ListenerRead the license before using any part from this codeMalicious Android apk generator (Reverse Shell)Legal disclaimer:Usage...
DiscordRAT – Discord Remote Administration Tool Fully Written In Python
Discord Remote Administration Tool fully written in Python3.This is a RAT controlled over Discord with over 20 post exploitation modules.Disclaimer:This...
QNodeService: Node.js Trojan Spread via Covid-19 Lure
Insights and Analysis by Matthew Stewart We recently noticed a Twitter post by MalwareHunterTeam that showed a Java downloader with...
May Patch Tuesday: More Fixes for SharePoint, TLS, Runtime, and Graphic Components Released
This month’s Patch Tuesday includes 111 fixes for Microsoft. Of the 111 vulnerabilities, 16 have been rated Critical while the...
Tropic Trooper’s Back: USBferry Attack Targets Air-gapped Environments
By Joey Chen (Threats Analyst) Tropic Trooper, a threat actor group that targets government, military, healthcare, transportation, and high-tech industries...
New MacOS Dacls RAT Backdoor Show Lazarus’ Multi-Platform Attack Capability
By Gabrielle Joyce Mabutas With additional insights/analysis from Kazuki Fujisawa A one-time password (OTP) system involves the use of a...
Sodinokibi drops greatest hits collection, and crime is the secret ingredient
When a group of celebrities ask to speak with their lawyer, they usually don’t have to call in a bunch...
FinCEN Chief Blanco warns of Wide Scale Virtual Currency Scams
Financial Crimes Enforcement Network (FinCEN) is keeping a close watch on financial scams involving virtual currency payments as the COVID-19...
The Russian State Duma adopted a law on remote voting
The State Duma adopted in the second and third readings amendments of deputies of United Russia that simplify the organization...
Windows 10 New Feature Hunts and Thwarts PUAs/PUPs
Per reports, Microsoft has hinted that the next main version of Windows 10 will come stacked with a fresh security...
The lifespan of Phishing Attacks Recorded a Tremendous Growth in H2 2019
Phishing attacks recorded a remarkable surge in H2 2019, the growth has been alarming with the number of phishing websites...
Cyberthreats on lockdown
Every year, our anti-malware research team releases a series of reports on various cyberthreats: financial malware, web attacks, exploits, etc....
COMpfun authors spoof visa application with HTTP status-based Trojan
You may remember that in autumn 2019 we published a story about how a COMpfun successor known as Reductor infected...
Lockphish – A Tool For Phishing Attacks On The Lock Screen, Designed To Grab Windows Credentials, Android PIN And iPhone Passcode
Lockphish it's the first tool (05/13/2020) for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN...
DalFox (Finder Of XSS) – Parameter Analysis And XSS Scanning Tool Based On Golang
Finder Of XSS, and Dal is the Korean pronunciation of moon. What is DalFoxJust, XSS Scanning and Parameter Analysis tool....
How CVSS works: characterizing and scoring vulnerabilities
The Common Vulnerability Scoring System (CVSS) provides software developers, testers, and security and IT professionals with a standardized process for...
Data of 9 million customers of the Russian courier service CDEK leaked
Data belonging to nine million customers of the CDEC Express transportation service was put up for sale on the Web...
