Month: November 2022

HackerOne Bug Bounty Disclosure: xss-in-desktop-client-via-user-status-and-informationbymikeisastar

November 25, 2022

Programme HackerOne Nextcloud Nextcloud Submitted by mikeisastar mikeisastar Report XSS in Desktop Client via user status and information Full Report...

HackerOne Bug Bounty Disclosure: ssrf—pivoting-in-the-private-lanbyadrian_t

November 25, 2022

Programme HackerOne Concrete CMS Concrete CMS Submitted by adrian_t adrian_t Report SSRF - pivoting in the private LAN Full Report...

HackerOne Bug Bounty Disclosure: xss-in-desktop-client-in-call-notification-popupbymikeisastar

November 25, 2022

Programme HackerOne Nextcloud Nextcloud Submitted by mikeisastar mikeisastar Report XSS in Desktop Client in call notification popup Full Report A...

Malware Analysis – evasion – 224b194e758a7b1449db1eb23a68ed3b

November 25, 2022

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 224b194e758a7b1449db1eb23a68ed3bSHA1: 6aac62a4d44cecf514f6c7106bb866bfe1f357ceANALYSIS DATE: 2022-11-25T10:15:59ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

HackerOne Bug Bounty Disclosure: xss-in-desktop-client-in-the-notificationsbymikeisastar

November 25, 2022

Programme HackerOne Nextcloud Nextcloud Submitted by mikeisastar mikeisastar Report XSS in Desktop Client in the notifications Full Report A considerable...

Malware Analysis – ransomware – 17485065a43b245d9bf7207d187304e6

November 25, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 17485065a43b245d9bf7207d187304e6SHA1: 6237a3eadf355cf8a92ea6067df1f45d4da3aa53ANALYSIS DATE: 2022-11-25T10:17:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – ccab2ea95f8895bc7eca9ee67158b661

November 25, 2022

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: ccab2ea95f8895bc7eca9ee67158b661SHA1: bbf463386c061082cdca777fddabfeef82c647b3ANALYSIS DATE: 2022-11-25T11:08:16ZTTPS: T1490 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – ransomware – 3790b26f9b561ad2bcc35623fb5d433e

November 25, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 3790b26f9b561ad2bcc35623fb5d433eSHA1: dd4c529fd481c81d7597ce8ab7e096c23090baa7ANALYSIS DATE: 2022-11-25T11:10:22ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 4f20fef5c4e0ad0098839ca486be88c6

November 25, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 4f20fef5c4e0ad0098839ca486be88c6SHA1: e5f0c00451379bfc5d2b36d4453f49e17aad6aa2ANALYSIS DATE: 2022-11-25T11:10:26ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – caa5f89eaaf8282758824531858d7139

November 25, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: caa5f89eaaf8282758824531858d7139SHA1: 3e60d29f4d60ef81e1bad891598909e666037c5eANALYSIS DATE: 2022-11-25T11:10:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 231bfb05a1be7c8677a6e85028b54ca3

November 25, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 231bfb05a1be7c8677a6e85028b54ca3SHA1: 1080ba79be4c95fccba6f377396e72b4f7c0c833ANALYSIS DATE: 2022-11-25T11:10:25ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 685f5063d94fe912afc3602bb8deef5c

November 25, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 685f5063d94fe912afc3602bb8deef5cSHA1: 38f342b9cf9a055d8d13fc743d200a0d2c3cbe6eANALYSIS DATE: 2022-11-25T11:10:30ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – ransomware – 23ed713ec0ca1a25a8f7ac254c898d87

November 25, 2022

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 23ed713ec0ca1a25a8f7ac254c898d87SHA1: d904ea99d0fcb7ce9d06efd55321c5121c821dd5ANALYSIS DATE: 2022-11-25T11:10:35ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – evasion – a987d32f2cb019083bb6e330b5ecf0f8

November 25, 2022

Score: 6 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: a987d32f2cb019083bb6e330b5ecf0f8SHA1: 7fbeee4580eb44d67568fe393630b84b0bc2d6cbANALYSIS DATE: 2022-11-25T11:11:08ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – 9f6e87adedb51ad28c7235f8c3378632

November 25, 2022

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 9f6e87adedb51ad28c7235f8c3378632SHA1: fed596d36a812b75d48ac684ecb44bb5fd8457f5ANALYSIS DATE: 2022-11-25T11:11:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 390bbb3fe686b422f273855b4684417d

November 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 390bbb3fe686b422f273855b4684417dSHA1: ae184538635625563ebdc22ca808124c23c77f03ANALYSIS DATE: 2022-11-25T15:28:29ZTTPS: T1053, T1005, T1081, T1012,...

Malware Analysis – discovery – 6b21326e999c658fec247ea85cce034a

November 25, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 6b21326e999c658fec247ea85cce034aSHA1: db2e65eda2b254afe982f1c08e9d2d601008432eANALYSIS DATE: 2022-11-25T15:34:42ZTTPS: T1012, T1082, T1130, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – evasion – 989ae3d195203b323aa2b3adf04e9833

November 25, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 989ae3d195203b323aa2b3adf04e9833SHA1: 31a45521bc672abcf64e50284ca5d4e6b3687dc8ANALYSIS DATE: 2022-11-25T15:52:35ZTTPS: T1004, T1112, T1082, T1088, T1089, T1491 ScoreMeaningExample10Known badA...

Malware Analysis – discovery – d7b20f933be6cdae41efbe75548eba5f

November 25, 2022

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: d7b20f933be6cdae41efbe75548eba5fSHA1: 9fa11a63b43f83980e0b48dc9ba2cb59d545a4e8ANALYSIS DATE: 2022-11-25T15:38:30ZTTPS: T1012, T1082, T1060 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – 45c787fae28e23b61a47e0eb0a6a441f

November 25, 2022

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, stealer, trojanMD5: 45c787fae28e23b61a47e0eb0a6a441fSHA1: a2e376a9b1a31898214b1750a994c57e2a391fccANALYSIS DATE: 2022-11-25T15:53:02ZTTPS:...

HIVE Ransomware Victim: Guilford College

November 25, 2022

HIVE Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 25, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

November 25, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Malware Analysis – djvu – 1a0a136c94b2e23aa2a596002a02853d

November 25, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, ransomware, trojanMD5: 1a0a136c94b2e23aa2a596002a02853dSHA1: 6b714445a95d93bf023b4aa9f8355c9a13be9fb7ANALYSIS DATE: 2022-11-25T17:00:23ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family...

Month: November 2022

HackerOne Bug Bounty Disclosure: xss-in-desktop-client-via-user-status-and-informationbymikeisastar

HackerOne Bug Bounty Disclosure: ssrf—pivoting-in-the-private-lanbyadrian_t

HackerOne Bug Bounty Disclosure: xss-in-desktop-client-in-call-notification-popupbymikeisastar

Malware Analysis – evasion – 224b194e758a7b1449db1eb23a68ed3b

HackerOne Bug Bounty Disclosure: xss-in-desktop-client-in-the-notificationsbymikeisastar

Malware Analysis – ransomware – 17485065a43b245d9bf7207d187304e6

Malware Analysis – evasion – ccab2ea95f8895bc7eca9ee67158b661

Malware Analysis – ransomware – 3790b26f9b561ad2bcc35623fb5d433e

Malware Analysis – ransomware – 4f20fef5c4e0ad0098839ca486be88c6

Malware Analysis – ransomware – caa5f89eaaf8282758824531858d7139

Malware Analysis – ransomware – 231bfb05a1be7c8677a6e85028b54ca3

Malware Analysis – ransomware – 685f5063d94fe912afc3602bb8deef5c

Malware Analysis – ransomware – 23ed713ec0ca1a25a8f7ac254c898d87

Malware Analysis – evasion – a987d32f2cb019083bb6e330b5ecf0f8

Malware Analysis – ransomware – 9f6e87adedb51ad28c7235f8c3378632

Malware Analysis – djvu – 390bbb3fe686b422f273855b4684417d

Malware Analysis – discovery – 6b21326e999c658fec247ea85cce034a

Malware Analysis – evasion – 989ae3d195203b323aa2b3adf04e9833

Malware Analysis – discovery – d7b20f933be6cdae41efbe75548eba5f

Malware Analysis – amadey – 45c787fae28e23b61a47e0eb0a6a441f

HIVE Ransomware Victim: Guilford College

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

Malware Analysis – djvu – 1a0a136c94b2e23aa2a596002a02853d

CISA: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

CISA: CISA Releases Four Industrial Control Systems Advisories

CISA: JCDC’s Industry-Government Collaboration Speeds Mitigation of CrowdStrike IT Outage

CISA: CISA Releases Three Industrial Control Systems Advisories

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

You may have missed