Year: 2023

Malware Analysis – djvu – a10001188943b8189970fde759969f48

February 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: a10001188943b8189970fde759969f48SHA1: b32d033108644ddb50848b12fe95f95f70ca835aANALYSIS DATE: 2023-02-04T05:31:42ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – amadey – fd02bf0f245e164419efd8783fd5e536

February 4, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:fabookie, family:laplas, family:smokeloader, backdoor, clipper, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: fd02bf0f245e164419efd8783fd5e536SHA1: e3efc6c4a901833b1564ffd04c0ddf9e250538ccANALYSIS...

Instant Checkmate – 11,943,887 breached accounts

February 4, 2023

HIBP In 2019, the public records search service Instant Checkmate suffered a data breach that later came to light in...

LockBit 3.0 Ransomware Victim: virtuosgames[.]com

February 4, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Cobalt Stike Beacon Detected – 120[.]77[.]1[.]92:8000

February 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 192[.]227[.]232[.]195:80

February 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 82[.]157[.]163[.]90:80

February 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 199[.]195[.]251[.]23:80

February 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 109[.]172[.]45[.]85:80

February 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

LockBit 3.0 Ransomware Victim: urmgroup[.]com[.]au

February 3, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Play Ransomware Victim: Point Dedicated Services

February 3, 2023

Play News Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

HackerOne Bug Bounty Disclosure: mystery-with-a-leaked-token-and-reusability-of-email-confirmation-link-leading-to-account-takeoverbygokulsk

February 3, 2023

Programme HackerOne Sorare Sorare Submitted by gokulsk gokulsk Report Mystery with a leaked token and Reusability of email confirmation link...

HackerOne Bug Bounty Disclosure: tiktok-2fa-bypassbyamans

February 3, 2023

Programme HackerOne TikTok TikTok Submitted by amans amans Report TikTok 2FA Bypass Full Report A considerable amount of time and...

Cobalt Stike Beacon Detected – 154[.]12[.]35[.]140:80

February 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]242[.]63[.]91:4443

February 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 82[.]157[.]102[.]120:8082

February 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 3[.]29[.]24[.]212:443

February 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 179[.]60[.]147[.]188:80

February 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 34[.]29[.]37[.]160:443

February 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Delta Electronics DX-2100L1-CN cross-site scripting | CVE-2023-0432

February 3, 2023

NAME__________Delta Electronics DX-2100L1-CN cross-site scriptingPlatforms Affected:Risk Level:9Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Delta Electronics DX-2100L1-CN is vulnerable to cross-site scripting, caused by improper validation...

Tenable tenable.io, tenable.sc and Nessus privilege escalation | CVE-2023-0524

February 3, 2023

NAME__________Tenable tenable.io, tenable.sc and Nessus privilege escalationPlatforms Affected:Tenable Network Security Nessus Tenable Tenable.io Tenable Tenable.scRisk Level:9.1Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Tenable tenable.io, tenable.sc...

Year: 2023

Malware Analysis – djvu – a10001188943b8189970fde759969f48

Malware Analysis – amadey – fd02bf0f245e164419efd8783fd5e536

Instant Checkmate – 11,943,887 breached accounts

LockBit 3.0 Ransomware Victim: virtuosgames[.]com

Cobalt Stike Beacon Detected – 120[.]77[.]1[.]92:8000

Cobalt Stike Beacon Detected – 192[.]227[.]232[.]195:80

Cobalt Stike Beacon Detected – 82[.]157[.]163[.]90:80

Cobalt Stike Beacon Detected – 199[.]195[.]251[.]23:80

Cobalt Stike Beacon Detected – 109[.]172[.]45[.]85:80

LockBit 3.0 Ransomware Victim: urmgroup[.]com[.]au

Play Ransomware Victim: Point Dedicated Services

HackerOne Bug Bounty Disclosure: mystery-with-a-leaked-token-and-reusability-of-email-confirmation-link-leading-to-account-takeoverbygokulsk

HackerOne Bug Bounty Disclosure: tiktok-2fa-bypassbyamans

Cobalt Stike Beacon Detected – 154[.]12[.]35[.]140:80

Cobalt Stike Beacon Detected – 47[.]242[.]63[.]91:4443

Cobalt Stike Beacon Detected – 82[.]157[.]102[.]120:8082

Cobalt Stike Beacon Detected – 3[.]29[.]24[.]212:443

Cobalt Stike Beacon Detected – 179[.]60[.]147[.]188:80

Cobalt Stike Beacon Detected – 34[.]29[.]37[.]160:443

Delta Electronics DX-2100L1-CN cross-site scripting | CVE-2023-0432

Tenable tenable.io, tenable.sc and Nessus privilege escalation | CVE-2023-0524

TRENDnet TEW-652BRP command execution | CVE-2023-0611

Dell EMC PowerScale OneFS information disclosure | CVE-2023-22575

femanager extension for TYPO3 security bypass | CVE-2023-25013

HackerOne Bug Bounty Disclosure: unauthenticated-path-traversal-and-command-injection-in-trellix-enterprise-security-manager-r-v

CVE Alert: CVE-2024-42168

CVE Alert: CVE-2024-12204

CVE Alert: CVE-2024-42169

CVE Alert: CVE-2024-12627

You may have missed