Cobalt Stike Beacon Detected – 82[.]156[.]27[.]75:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Month: August 2022
Cobalt Stike Beacon Detected – 101[.]34[.]7[.]49:81
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 23[.]227[.]198[.]227:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 138[.]2[.]87[.]40:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 103[.]119[.]3[.]216:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 120[.]48[.]75[.]169:6666
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]154[.]220[.]158:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
LockBit 3.0 Ransomware Victim: robitgroup[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: destinationhope[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: ruffinlawyers[.]com[.]au
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: studiobarba[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: orioninc[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: barrydowd[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: growag[.]ch
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: centrodsr[.]it
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: pinjuhlaw[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
LockBit 3.0 Ransomware Victim: hikadikoy[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
GoldDragon campaign: North-Korea linked Kimsuky APT adopts victim verification technique
The North Korea-linked Kimsuky APT is behind a new campaign, tracked as GoldDragon, targeting political and diplomatic entities in South...
Exment SQL Injection | CVE-2022-37333
NAME Exment SQL Injection Platforms Affected:Exment Exment 5.0.2Risk Level:8.8Exploitability:HighConsequences:Data Manipulation DESCRIPTION Exment is vulnerable to SQL injection. A remote attacker...
Apache Hadoop command execution | CVE-2021-25642
NAME Apache Hadoop command execution Platforms Affected:Apache Hadoop 3.0.0-alpha Apache Hadoop 2.9.0 Apache Hadoop 2.10.1 Apache Hadoop 3.3.0 Apache Hadoop...
Moveable Type, Moveable Type Premium, and Moveable Type Advanced command execution | CVE-2022-38078
NAME Moveable Type, Moveable Type Premium, and Moveable Type Advanced command execution Platforms Affected:Six Apart Moveable Type 7.1.4 Six Apart...
UNIMO UDR-JA1004, UNIMO UDR-JA1008, and UNIMO UDR-JA1016 command execution | CVE-2022-35733
NAME UNIMO UDR-JA1004, UNIMO UDR-JA1008, and UNIMO UDR-JA1016 command execution Platforms Affected:UNIMO UDR-JA1004 1.0.20.13 UNIMO UDR-JA1008 1.0.20.13 UNIMO UDR-JA1016 1.0.20.13...
Elasticsearch Elastic Cloud Enterprise information disclosure | CVE-2022-23715
NAME Elasticsearch Elastic Cloud Enterprise information disclosure Platforms Affected:Elasticsearch Elastic Cloud Enterprise 3.3.0Risk Level:8.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION Elasticsearch Elastic Cloud Enterprise...
0ktapus phishing campaign: Twilio hackers targeted other 136 organizations
The threat actors behind Twilio and Cloudflare attacks have been linked to a phishing campaign that targeted other 136 organizations. The threat actors...
