HackerOne Bug Bounty Disclosure: csp-bypass-xss-in-project-settings-pagebyyvvdwf
Programme HackerOne GitLab GitLab Submitted by yvvdwf yvvdwf Report CSP-bypass XSS in project settings page Full Report A considerable amount...
Month: November 2022
Malware Analysis – djvu – 4af869180d81d4cfb263e86d7161a18a
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4af869180d81d4cfb263e86d7161a18aSHA1: 01a0428bb825147cde47c922f04b6e074f908ca0ANALYSIS DATE: 2022-11-16T15:16:16ZTTPS: T1060, T1112, T1082, T1005,...
Malware Analysis – evasion – 06121671b9de18edfc74f1ca3c566001
Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 06121671b9de18edfc74f1ca3c566001SHA1: 12d586ccb57197b5ea48ff978f6e59ed20a1f7a3ANALYSIS DATE: 2022-11-16T15:12:04ZTTPS: T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – amadey – 114a29e4828e47605fb68bbda1c91cd4
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:asyncrat, family:dcrat, family:djvu, family:eternity, family:raccoon, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:@redlinevip cloud (tg: @fatherofcarders), botnet:client6, botnet:dbffbdbc9786a5c270e6dd2d647e18ea,...
Malware Analysis – djvu – 26bc838e4d36c0d4f7c8e45458670276
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 26bc838e4d36c0d4f7c8e45458670276SHA1: ea289be9fbd1f6252caa58f7e41dc0ed4f4a3ea3ANALYSIS DATE: 2022-11-16T16:25:43ZTTPS: T1005, T1081, T1222, T1082,...
CISA: CISA and FBI Release Advisory on Iranian Government-Sponsored APT Actors Compromising Federal Network
CISA and FBI Release Advisory on Iranian Government-Sponsored APT Actors Compromising Federal Network Today, CISA and the Federal Bureau of...
CISA: Mozilla Releases Security Updates for Multiple Products
Mozilla Releases Security Updates for Multiple Products Mozilla has released security updates to address vulnerabilities in Thunderbird, Firefox ESR, and Firefox. An...
Malware Analysis – lockbit – 48aa442a0670b65a82eee99c1ed1ac78
Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: 48aa442a0670b65a82eee99c1ed1ac78SHA1: 12117609b746257a6cdd2808dcb50c6af9c1810dANALYSIS DATE: 2022-11-16T17:50:04ZTTPS: T1490, T1046, T1082, T1107, T1060, T1112 ScoreMeaningExample10Known...
Malware Analysis – djvu – 5b95e84a91c972f557690b38cddd8fd4
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 5b95e84a91c972f557690b38cddd8fd4SHA1: 9c8edebbd80c013835a370484d173fa5abc8053aANALYSIS DATE: 2022-11-16T16:32:01ZTTPS: T1053, T1005, T1081, T1012,...
Malware Analysis – amadey – 7960146c3ce0103f7c63f99952955c3c
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:eternity, family:raccoon, family:redline, family:smokeloader, family:vidar, botnet:3m, botnet:517, botnet:@redlinevip cloud (tg: @fatherofcarders), botnet:dbffbdbc9786a5c270e6dd2d647e18ea, botnet:mario23_10,...
Malware Analysis – smokeloader – 5ca04c00a108bc8a1ebc6f2acb206914
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 5ca04c00a108bc8a1ebc6f2acb206914SHA1: 1aa8c66127e76ee084070eb985d9a5f776bde6d4ANALYSIS DATE: 2022-11-16T17:52:07ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
New RapperBot Campaign targets game servers with DDoS attacks
Fortinet researchers discovered new samples of RapperBot used to build a botnet to launch Distributed DDoS attacks against game servers....
TripleCross – A Linux eBPF Rootkit With A Backdoor, C2, Library Injection, Execution Hijacking, Persistence And Stealth Capabilities.
TripleCross is a Linux eBPF rootkit that demonstrates the offensive capabilities of the eBPF technology. TripleCross is inspired by previous...
BugCrowd Bug Bounty Disclosure: – Impersonation via Broken Link Hijacking on https://sv.hellosign.com – By CoffeeAddict_exe
The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...
BugCrowd Bug Bounty Disclosure: – Panel access at https://news-push-88.op-mobile.opera.com/. – By rahul0x01
The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...
Cobalt Stike Beacon Detected – 18[.]208[.]157[.]91:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 2[.]56[.]173[.]252:2086
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 42[.]194[.]209[.]253:6666
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 104[.]244[.]73[.]220:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Black Basta Ransomware Victim: Kessing Rechtsanwälte und Fachanwälte in PartGmbB
Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
Malware Analysis – djvu – 22aa49033009f6967fd9a53f40b0fa66
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 22aa49033009f6967fd9a53f40b0fa66SHA1: fa550aea311c22d187df218d909d65dd2e9329e3ANALYSIS DATE: 2022-11-16T09:04:27ZTTPS: T1005, T1081, T1060, T1112,...
Malware Analysis – amadey – 6567aa75c8bfb976b2c2ac054c94972c
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:123, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware,...
Cobalt Stike Beacon Detected – 119[.]3[.]73[.]208:9999
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]138[.]231[.]8:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
