Month: November 2022

HackerOne Bug Bounty Disclosure: api-tokens-and-emails-leaked-lead-to–sensitive-information-disclosurebydevdevirl

November 17, 2022

Programme HackerOne ZeroBounce ZeroBounce Submitted by devdevirl devdevirl Report API tokens and Emails leaked lead to sensitive information Disclosure Full...

HackerOne Bug Bounty Disclosure: csrf-in-appsearch-allows-creation-of-“curations”bydee-see

November 17, 2022

Programme HackerOne Elastic Elastic Submitted by dee-see dee-see Report CSRF in AppSearch allows creation of "curations" Full Report A considerable...

Malware Analysis – djvu – 3e7f3868a74c02eb301e31bd7dd77282

November 17, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – locky – e462024bcb091ac107da1c565895dd57

November 17, 2022

Score: 10 MALWARE FAMILY: lockyTAGS:family:locky, family:marsstealer, botnet:default, discovery, persistence, ransomware, stealerMD5: e462024bcb091ac107da1c565895dd57SHA1: 2f17adb1ce33312b887b117d6b358361a4d2c1e8ANALYSIS DATE: 2022-11-17T16:38:43ZTTPS: T1082, T1012, T1112, T1042, T1060...

Malware Analysis – djvu – d83bba5f1285754574318b5268e5e5ae

November 17, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1827, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – – a1cadb91da778d550be10373b94afa2c

November 17, 2022

Score: 5 MALWARE FAMILY: TAGS:MD5: a1cadb91da778d550be10373b94afa2cSHA1: 6122146e5f76c5519d9ada04c2458d393c8069dfANALYSIS DATE: 2022-11-17T15:47:31ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – b2c4eb0e8bfac5267b26c2cef4b93c58

November 17, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: b2c4eb0e8bfac5267b26c2cef4b93c58SHA1: 89b25e553382379fb15344d9a88b744879ee59fdANALYSIS DATE: 2022-11-17T16:58:19ZTTPS: T1222, T1082, T1053, T1005,...

Magento and Adobe Commerce websites under attack

November 17, 2022

Researchers warn of a surge in cyberattacks targeting CVE-2022-24086, a pre-authentication issue impacting Adobe Commerce and Magento stores. In September 2022,...

nuvola – Tool To Dump And Perform Automatic And Manual Security Analysis On Aws Environments Configurations And Services

November 17, 2022

nuvola (with the lowercase n) is a tool to dump and perform automatic and manual security analysis on AWS environments...

Cobalt Stike Beacon Detected – 116[.]211[.]120[.]25:8088

November 17, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 3[.]73[.]117[.]245:443

November 17, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]143[.]119[.]212:6666

November 17, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

November 17, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

November 17, 2022

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

Cobalt Stike Beacon Detected – 43[.]155[.]66[.]70:443

November 17, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]78[.]85[.]158:6002

November 17, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]117[.]60[.]167:8443

November 17, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]116[.]3[.]85:443

November 17, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]222[.]185[.]248:8080

November 17, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 88[.]80[.]148[.]204:8001

November 17, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 121[.]4[.]36[.]214:443

November 17, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 192[.]74[.]250[.]143:9999

November 17, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – lockbit – 02ad715191b64a46120e38ca6cb1ef6a

November 17, 2022

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: 02ad715191b64a46120e38ca6cb1ef6aSHA1: cfd8d84b1013e5cf88878ca36021272ee0231504ANALYSIS DATE: 2022-11-17T11:39:09ZTTPS: T1490, T1046, T1107, T1491, T1112, T1060, T1082,...

Malware Analysis – djvu – 59ebbae90911a0a3ca038e71855c7ce2

November 17, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 59ebbae90911a0a3ca038e71855c7ce2SHA1: f38b4da77a1ef5c57252599e8f25a89ec9bc8ddfANALYSIS DATE: 2022-11-17T10:39:09ZTTPS: T1005, T1081, T1012, T1082,...

Month: November 2022

HackerOne Bug Bounty Disclosure: api-tokens-and-emails-leaked-lead-to–sensitive-information-disclosurebydevdevirl

HackerOne Bug Bounty Disclosure: csrf-in-appsearch-allows-creation-of-“curations”bydee-see

Malware Analysis – djvu – 3e7f3868a74c02eb301e31bd7dd77282

Malware Analysis – locky – e462024bcb091ac107da1c565895dd57

Malware Analysis – djvu – d83bba5f1285754574318b5268e5e5ae

Malware Analysis – – a1cadb91da778d550be10373b94afa2c

Malware Analysis – djvu – b2c4eb0e8bfac5267b26c2cef4b93c58

Magento and Adobe Commerce websites under attack

nuvola – Tool To Dump And Perform Automatic And Manual Security Analysis On Aws Environments Configurations And Services

Cobalt Stike Beacon Detected – 116[.]211[.]120[.]25:8088

Cobalt Stike Beacon Detected – 3[.]73[.]117[.]245:443

Cobalt Stike Beacon Detected – 43[.]143[.]119[.]212:6666

BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01

BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe

Cobalt Stike Beacon Detected – 43[.]155[.]66[.]70:443

Cobalt Stike Beacon Detected – 120[.]78[.]85[.]158:6002

Cobalt Stike Beacon Detected – 1[.]117[.]60[.]167:8443

Cobalt Stike Beacon Detected – 1[.]116[.]3[.]85:443

Cobalt Stike Beacon Detected – 124[.]222[.]185[.]248:8080

Cobalt Stike Beacon Detected – 88[.]80[.]148[.]204:8001

Cobalt Stike Beacon Detected – 121[.]4[.]36[.]214:443

Cobalt Stike Beacon Detected – 192[.]74[.]250[.]143:9999

Malware Analysis – lockbit – 02ad715191b64a46120e38ca6cb1ef6a

Malware Analysis – djvu – 59ebbae90911a0a3ca038e71855c7ce2

[MEDUSA] – Ransomware Victim: International University of Sarajevo

[MEDUSA] – Ransomware Victim: Whitaker Construction Group

[RANSOMHUB] – Ransomware Victim: fullfordelectric[.]com

[HELLCAT] – Ransomware Victim: Ministry of Education – Jordan

[HELLCAT] – Ransomware Victim: College of Business – Tanzania

You may have missed