Month: March 2023

pg_ivm information disclosure | CVE-2023-22847

March 7, 2023

NAME__________pg_ivm information disclosurePlatforms Affected:pg_ivm pg_ivm 1.5.0Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________pg_ivm could allow a remote authenticated attacker to obtain sensitive information, caused...

Starsoftcomm CooCare privilege escalation | CVE-2022-45988

March 7, 2023

NAME__________Starsoftcomm CooCare privilege escalationPlatforms Affected:Starsoftcomm CooCare 5.304Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Starsoftcomm CooCare could allow a local authenticated attacker to gain elevated...

Ghost information disclosure | CVE-2023-26510

March 7, 2023

NAME__________Ghost information disclosurePlatforms Affected:Ghost Foundation Ghost 5.35.0Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Ghost could allow a remote authenticated attacker to obtain sensitive information,...

Report server-side request forgery | CVE-2022-46973

March 7, 2023

NAME__________Report server-side request forgeryPlatforms Affected:anji-plus AJ-Report 0.9.8.6Risk Level:7.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Report is vulnerable to server-side request forgery, caused by a flaw....

Sourcecodester Health Center Patient Record Management System cross-site scripting | CVE-2023-1180

March 7, 2023

NAME__________Sourcecodester Health Center Patient Record Management System cross-site scriptingPlatforms Affected:Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Sourcecodester Health Center Patient Record Management System is...

Sourcecodester Computer Parts Sales and Inventory System cross-site scripting | CVE-2023-1179

March 7, 2023

NAME__________Sourcecodester Computer Parts Sales and Inventory System cross-site scriptingPlatforms Affected:Risk Level:6.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Sourcecodester Computer Parts Sales and Inventory System is...

LSoft ListServ cross-site scripting | CVE-2023-27641

March 7, 2023

NAME__________LSoft ListServ cross-site scriptingPlatforms Affected:LSoft ListServ 16.5Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________LSoft ListServ is vulnerable to cross-site scripting, caused by improper validation...

LastPass Hack: Engineer’s Failure to Update Plex Software Led to Massive Data Breach

March 7, 2023

The massive breach at LastPass was the result of one of its engineers failing to update Plex on their home...

Shein’s Android App Caught Transmitting Clipboard Data to Remote Servers

March 7, 2023

An older version of Shein's Android application suffered from a bug that periodically captured and transmitted clipboard contents to a...

Malware Analysis – djvu – 5455cf36a15f21a0f31769c4c4d6655c

March 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 5455cf36a15f21a0f31769c4c4d6655cSHA1: c7023a3139820e0c7e9bb995349c6ea09da2861dANALYSIS DATE: 2023-03-07T03:17:03ZTTPS: T1222, T1060, T1112, T1082, T1012, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – 6c46bd1e98cea276b9cf7da8dcfc7bbf

March 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 6c46bd1e98cea276b9cf7da8dcfc7bbfSHA1: 665996a9cf1bb412fa9a144e1e986e225938fca4ANALYSIS DATE: 2023-03-07T04:32:01ZTTPS: T1053, T1060, T1112, T1222, T1082, T1012 ScoreMeaningExample10Known badA...

Malware Analysis – babadeda – aaa058858261d7c0e73fa1b8264a9a3d

March 7, 2023

Score: 10 MALWARE FAMILY: babadedaTAGS:family:babadeda, crypter, evasion, loader, trojanMD5: aaa058858261d7c0e73fa1b8264a9a3dSHA1: 1233af8c8377567b2b8ebf7642f0036c9797596bANALYSIS DATE: 2023-03-07T04:48:05ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – ransomware – 2706ddf9c7abaa877389ae566acf1fe8

March 7, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 2706ddf9c7abaa877389ae566acf1fe8SHA1: 7f3fb8d2a67f73f26e0b57fa6d5bed9c461c2b8fANALYSIS DATE: 2023-03-07T04:50:20ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – dharma – 6ed029b9794717d305103e9eb20a8d1f

March 7, 2023

Score: 10 MALWARE FAMILY: dharmaTAGS:family:dharma, persistence, ransomware, spyware, stealerMD5: 6ed029b9794717d305103e9eb20a8d1fSHA1: 956ebe054b5f286a1584b365dde59c130dd494eeANALYSIS DATE: 2023-03-07T04:44:09ZTTPS: T1082, T1112, T1107, T1490, T1005, T1081, T1060...

Malware Analysis – lockbit – 4b122da82c589d68d15a98ba73997910

March 7, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: 4b122da82c589d68d15a98ba73997910SHA1: 3e4e31479d739e49af21f381a2be11a4e93d2d22ANALYSIS DATE: 2023-03-07T04:54:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – ransomware – d27a6fca4044aa663fee95587670ad30

March 7, 2023

Score: 8 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: d27a6fca4044aa663fee95587670ad30SHA1: affc479462c7756ee00c4cdf3e12459116223a1bANALYSIS DATE: 2023-03-07T05:08:34ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – – 7c5cba9d017262c75c329d88203499d8

March 7, 2023

Score: 7 MALWARE FAMILY: TAGS:MD5: 7c5cba9d017262c75c329d88203499d8SHA1: 4e2b80cf9d2ec3ba458110456037e53f2b86bacdANALYSIS DATE: 2023-03-07T05:13:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – djvu – 8a5c81cb9f1cec2468a596a6cf81cd01

March 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 8a5c81cb9f1cec2468a596a6cf81cd01SHA1: 912dee147a557b5e3be75f53e608c02d66e2498cANALYSIS DATE: 2023-03-07T05:26:07ZTTPS: T1222, T1060, T1112, T1082, T1012, T1053 ScoreMeaningExample10Known badA...

Malware Analysis – lockbit – a7637dfb6b9408fe020d9333d0ade6dc

March 7, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, evasion, persistence, ransomwareMD5: a7637dfb6b9408fe020d9333d0ade6dcSHA1: 930c34743ab12c80512723db0aa7b8b4762fcc84ANALYSIS DATE: 2023-03-07T05:03:03ZTTPS: T1490, T1059, T1107, T1491, T1112, T1018, T1082, T1012,...

Malware Analysis – djvu – e80ec3dc9b00399680eb7396815489ba

March 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: e80ec3dc9b00399680eb7396815489baSHA1: d6b23f8f2a225a45bfa3089d48116a801419bd96ANALYSIS DATE: 2023-03-07T05:30:09ZTTPS: T1082, T1012, T1053, T1222, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – djvu – e8ed2bad8460aeba1c043cc6dba5965a

March 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: e8ed2bad8460aeba1c043cc6dba5965aSHA1: c4f496d9855bc57fbd8a1ae5ca1693750e710e21ANALYSIS DATE: 2023-03-07T05:51:46ZTTPS: T1222, T1082, T1012, T1053, T1060, T1112 ScoreMeaningExample10Known badA...

Malware Analysis – bootkit – 0c303ae1347c0395a96f3eb38d26d7ed

March 7, 2023

Score: 8 MALWARE FAMILY: bootkitTAGS:bootkit, evasion, persistence, ransomware, upxMD5: 0c303ae1347c0395a96f3eb38d26d7edSHA1: c8cf473a22fc86ddad00ec286e94422f4b7d5c59ANALYSIS DATE: 2023-03-07T05:58:42ZTTPS: T1112, T1082, T1067, T1491 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – e227030d652d0435eca5602104fff392

March 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: e227030d652d0435eca5602104fff392SHA1: ec128acb345e8b29e8c80b3526aa01660c282478ANALYSIS DATE: 2023-03-07T05:33:22ZTTPS: T1060, T1112, T1222, T1082, T1053 ScoreMeaningExample10Known badA malware...

iD Tech – 415,121 breached accounts

March 7, 2023

HIBP In February 2023, the tech camps for kids service iD Tech had almost 1M records posted to a popular...

Month: March 2023

pg_ivm information disclosure | CVE-2023-22847

Starsoftcomm CooCare privilege escalation | CVE-2022-45988

Ghost information disclosure | CVE-2023-26510

Report server-side request forgery | CVE-2022-46973

Sourcecodester Health Center Patient Record Management System cross-site scripting | CVE-2023-1180

Sourcecodester Computer Parts Sales and Inventory System cross-site scripting | CVE-2023-1179

LSoft ListServ cross-site scripting | CVE-2023-27641

LastPass Hack: Engineer’s Failure to Update Plex Software Led to Massive Data Breach

Shein’s Android App Caught Transmitting Clipboard Data to Remote Servers

Malware Analysis – djvu – 5455cf36a15f21a0f31769c4c4d6655c

Malware Analysis – djvu – 6c46bd1e98cea276b9cf7da8dcfc7bbf

Malware Analysis – babadeda – aaa058858261d7c0e73fa1b8264a9a3d

Malware Analysis – ransomware – 2706ddf9c7abaa877389ae566acf1fe8

Malware Analysis – dharma – 6ed029b9794717d305103e9eb20a8d1f

Malware Analysis – lockbit – 4b122da82c589d68d15a98ba73997910

Malware Analysis – ransomware – d27a6fca4044aa663fee95587670ad30

Malware Analysis – – 7c5cba9d017262c75c329d88203499d8

Malware Analysis – djvu – 8a5c81cb9f1cec2468a596a6cf81cd01

Malware Analysis – lockbit – a7637dfb6b9408fe020d9333d0ade6dc

Malware Analysis – djvu – e80ec3dc9b00399680eb7396815489ba

Malware Analysis – djvu – e8ed2bad8460aeba1c043cc6dba5965a

Malware Analysis – bootkit – 0c303ae1347c0395a96f3eb38d26d7ed

Malware Analysis – djvu – e227030d652d0435eca5602104fff392

iD Tech – 415,121 breached accounts

[RAWORLD] – Ransomware Victim: Co****nt

[KILLSEC] – Ransomware Victim: inv[[.][.][.]]nator

[KILLSEC] – Ransomware Victim: Ithbar

[KILLSEC] – Ransomware Victim: RiverRestHome

[KILLSEC] – Ransomware Victim: Dardoc

You may have missed