Month: November 2022

HackerOne Bug Bounty Disclosure: xss-in-desktop-client-via-user-status-and-informationbymikeisastar

November 25, 2022

Programme HackerOne Nextcloud Nextcloud Submitted by mikeisastar mikeisastar Report XSS in Desktop Client via user status and information Full Report...

HackerOne Bug Bounty Disclosure: ssrf—pivoting-in-the-private-lanbyadrian_t

November 25, 2022

Programme HackerOne Concrete CMS Concrete CMS Submitted by adrian_t adrian_t Report SSRF - pivoting in the private LAN Full Report...

HackerOne Bug Bounty Disclosure: xss-in-desktop-client-in-call-notification-popupbymikeisastar

November 25, 2022

Programme HackerOne Nextcloud Nextcloud Submitted by mikeisastar mikeisastar Report XSS in Desktop Client in call notification popup Full Report A...

Malware Analysis – evasion – 224b194e758a7b1449db1eb23a68ed3b

November 25, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 224b194e758a7b1449db1eb23a68ed3bSHA1: 6aac62a4d44cecf514f6c7106bb866bfe1f357ceANALYSIS DATE: 2022-11-25T10:15:59ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

HackerOne Bug Bounty Disclosure: xss-in-desktop-client-in-the-notificationsbymikeisastar

November 25, 2022

Programme HackerOne Nextcloud Nextcloud Submitted by mikeisastar mikeisastar Report XSS in Desktop Client in the notifications Full Report A considerable...

Malware Analysis – ransomware – 17485065a43b245d9bf7207d187304e6

November 25, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 17485065a43b245d9bf7207d187304e6SHA1: 6237a3eadf355cf8a92ea6067df1f45d4da3aa53ANALYSIS DATE: 2022-11-25T10:17:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – ccab2ea95f8895bc7eca9ee67158b661

November 25, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: ccab2ea95f8895bc7eca9ee67158b661SHA1: bbf463386c061082cdca777fddabfeef82c647b3ANALYSIS DATE: 2022-11-25T11:08:16ZTTPS: T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 3790b26f9b561ad2bcc35623fb5d433e

November 25, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 3790b26f9b561ad2bcc35623fb5d433eSHA1: dd4c529fd481c81d7597ce8ab7e096c23090baa7ANALYSIS DATE: 2022-11-25T11:10:22ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 4f20fef5c4e0ad0098839ca486be88c6

November 25, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 4f20fef5c4e0ad0098839ca486be88c6SHA1: e5f0c00451379bfc5d2b36d4453f49e17aad6aa2ANALYSIS DATE: 2022-11-25T11:10:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – caa5f89eaaf8282758824531858d7139

November 25, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: caa5f89eaaf8282758824531858d7139SHA1: 3e60d29f4d60ef81e1bad891598909e666037c5eANALYSIS DATE: 2022-11-25T11:10:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 231bfb05a1be7c8677a6e85028b54ca3

November 25, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 231bfb05a1be7c8677a6e85028b54ca3SHA1: 1080ba79be4c95fccba6f377396e72b4f7c0c833ANALYSIS DATE: 2022-11-25T11:10:25ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 685f5063d94fe912afc3602bb8deef5c

November 25, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 685f5063d94fe912afc3602bb8deef5cSHA1: 38f342b9cf9a055d8d13fc743d200a0d2c3cbe6eANALYSIS DATE: 2022-11-25T11:10:30ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 23ed713ec0ca1a25a8f7ac254c898d87

November 25, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 23ed713ec0ca1a25a8f7ac254c898d87SHA1: d904ea99d0fcb7ce9d06efd55321c5121c821dd5ANALYSIS DATE: 2022-11-25T11:10:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – a987d32f2cb019083bb6e330b5ecf0f8

November 25, 2022

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: a987d32f2cb019083bb6e330b5ecf0f8SHA1: 7fbeee4580eb44d67568fe393630b84b0bc2d6cbANALYSIS DATE: 2022-11-25T11:11:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 9f6e87adedb51ad28c7235f8c3378632

November 25, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9f6e87adedb51ad28c7235f8c3378632SHA1: fed596d36a812b75d48ac684ecb44bb5fd8457f5ANALYSIS DATE: 2022-11-25T11:11:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 390bbb3fe686b422f273855b4684417d

November 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 390bbb3fe686b422f273855b4684417dSHA1: ae184538635625563ebdc22ca808124c23c77f03ANALYSIS DATE: 2022-11-25T15:28:29ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – discovery – 6b21326e999c658fec247ea85cce034a

November 25, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 6b21326e999c658fec247ea85cce034aSHA1: db2e65eda2b254afe982f1c08e9d2d601008432eANALYSIS DATE: 2022-11-25T15:34:42ZTTPS: T1012, T1082, T1130, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 989ae3d195203b323aa2b3adf04e9833

November 25, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 989ae3d195203b323aa2b3adf04e9833SHA1: 31a45521bc672abcf64e50284ca5d4e6b3687dc8ANALYSIS DATE: 2022-11-25T15:52:35ZTTPS: T1004, T1112, T1082, T1088, T1089, T1491 ScoreMeaningExample10Known badA...

Malware Analysis – discovery – d7b20f933be6cdae41efbe75548eba5f

November 25, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: d7b20f933be6cdae41efbe75548eba5fSHA1: 9fa11a63b43f83980e0b48dc9ba2cb59d545a4e8ANALYSIS DATE: 2022-11-25T15:38:30ZTTPS: T1012, T1082, T1060 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 45c787fae28e23b61a47e0eb0a6a441f

November 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, stealer, trojanMD5: 45c787fae28e23b61a47e0eb0a6a441fSHA1: a2e376a9b1a31898214b1750a994c57e2a391fccANALYSIS DATE: 2022-11-25T15:53:02ZTTPS:...

HIVE Ransomware Victim: Guilford College

November 25, 2022

HIVE Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 25, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

November 25, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Malware Analysis – djvu – 1a0a136c94b2e23aa2a596002a02853d

November 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, ransomware, trojanMD5: 1a0a136c94b2e23aa2a596002a02853dSHA1: 6b714445a95d93bf023b4aa9f8355c9a13be9fb7ANALYSIS DATE: 2022-11-25T17:00:23ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family...

Month: November 2022

HackerOne Bug Bounty Disclosure: xss-in-desktop-client-via-user-status-and-informationbymikeisastar

HackerOne Bug Bounty Disclosure: ssrf—pivoting-in-the-private-lanbyadrian_t

HackerOne Bug Bounty Disclosure: xss-in-desktop-client-in-call-notification-popupbymikeisastar

Malware Analysis – evasion – 224b194e758a7b1449db1eb23a68ed3b

HackerOne Bug Bounty Disclosure: xss-in-desktop-client-in-the-notificationsbymikeisastar

Malware Analysis – ransomware – 17485065a43b245d9bf7207d187304e6

Malware Analysis – evasion – ccab2ea95f8895bc7eca9ee67158b661

Malware Analysis – ransomware – 3790b26f9b561ad2bcc35623fb5d433e

Malware Analysis – ransomware – 4f20fef5c4e0ad0098839ca486be88c6

Malware Analysis – ransomware – caa5f89eaaf8282758824531858d7139

Malware Analysis – ransomware – 231bfb05a1be7c8677a6e85028b54ca3

Malware Analysis – ransomware – 685f5063d94fe912afc3602bb8deef5c

Malware Analysis – ransomware – 23ed713ec0ca1a25a8f7ac254c898d87

Malware Analysis – evasion – a987d32f2cb019083bb6e330b5ecf0f8

Malware Analysis – ransomware – 9f6e87adedb51ad28c7235f8c3378632

Malware Analysis – djvu – 390bbb3fe686b422f273855b4684417d

Malware Analysis – discovery – 6b21326e999c658fec247ea85cce034a

Malware Analysis – evasion – 989ae3d195203b323aa2b3adf04e9833

Malware Analysis – discovery – d7b20f933be6cdae41efbe75548eba5f

Malware Analysis – amadey – 45c787fae28e23b61a47e0eb0a6a441f

HIVE Ransomware Victim: Guilford College

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

Malware Analysis – djvu – 1a0a136c94b2e23aa2a596002a02853d

[STORMOUS] – Ransomware Victim: TRANSAK

Midnight Blizzard Spearphishing Campaign Exposes Thousands to RDP Threats

Over Half of US County Websites Are Vulnerable to Spoofing

LiteSpeed Cache Plugin Vulnerability Exposes Admin Access Risk

Apple Security Update: Critical Patches for macOS and iOS Vulnerabilities

You may have missed