Month: May 2023

Malware Analysis – djvu – 7fc8975d12d0c625852563e74ed817b4

May 12, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:ef32d425b907146eeb9090dbc9455ab1, discovery, persistence, ransomware, spyware, stealerMD5: 7fc8975d12d0c625852563e74ed817b4SHA1: cd323847b9a0577a9ae41653c8e113184943b81fANALYSIS DATE: 2023-05-12T15:35:03ZTTPS: T1012, T1005, T1081, T1222,...

Malware Analysis – amadey – bd01a0bfbc94c5d0e71502fea0851386

May 12, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:vidar, botnet:e5d7cb6205191dc1a4f6288000860943, botnet:pub1, backdoor, discovery, ransomware, stealer, trojanMD5: bd01a0bfbc94c5d0e71502fea0851386SHA1: 8d9dafa1bb98e192568a78860cdefe32d19466c1ANALYSIS DATE: 2023-05-12T15:30:10ZTTPS: T1012,...

Malware Analysis – smokeloader – 0f63cb7f587b9ef434ecd6de4e65be95

May 12, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0f63cb7f587b9ef434ecd6de4e65be95SHA1: 3a6208bd88cff055b3257b8397790394686f6a91ANALYSIS DATE: 2023-05-12T15:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Missing,Puzzle,Pieces,With,Megaphone,Icons.,Communication,,Discussion,,Chatting,,Conversation,

Daily Threat Intelligence – May 12 – 2023

May 12, 2023

Cryptomining attacks have become a prominent threat as they offer anonymity to illicit revenue earners in many ways. Security researchers...

CISA: CISA Adds Seven Known Exploited Vulnerabilities to Catalog

May 12, 2023

CISA Adds Seven Known Exploited Vulnerabilities to Catalog CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities Catalog,...

HackerOne Bug Bounty Disclosure: facebook-app-api-credentials-leaked-in-the-apkbychip_sec

May 12, 2023

Programme HackerOne GlassWire GlassWire Submitted by chip_sec chip_sec Report Facebook App API credentials leaked in the APK Full Report ...

HackerOne Bug Bounty Disclosure: html-injection-in-email-at-https://www-hackerone-com/byiamr0000t

May 12, 2023

Programme HackerOne HackerOne HackerOne Submitted by iamr0000t iamr0000t Report HTML injection in email at https://www.hackerone.com/ Full Report A considerable...

HackerOne Bug Bounty Disclosure: pii-of-users-can-be-downloaded-from-export-pagesbychip_sec

May 12, 2023

Programme HackerOne WordPress WordPress Submitted by chip_sec chip_sec Report PII of users can be downloaded from export pages Full Report...

HackerOne Bug Bounty Disclosure: attackers-do-not-need-to-pay-for-a-subscription-to-get-the-`discussion-group-url`-in-`paid-learning`byfind_me_here

May 12, 2023

Programme HackerOne LinkedIn LinkedIn Submitted by find_me_here find_me_here Report Attackers do not need to Pay for a Subscription to get...

HackerOne Bug Bounty Disclosure: attacker-can-unpin-posts-from-companies-he’s-not-part-of-byspaceboy20

May 12, 2023

Programme HackerOne LinkedIn LinkedIn Submitted by spaceboy20 spaceboy20 Report Attacker can unpin posts from companies he's not part of. Full...

HackerOne Bug Bounty Disclosure: delete-any-linkedin-comment-on-learning-api-of-other-usersbyencodedguy

May 12, 2023

Programme HackerOne LinkedIn LinkedIn Submitted by encodedguy encodedguy Report Delete any LinkedIn comment on learning API of other users Full...