Argo Project Argo CD security bypass | CVE-2023-22482
NAME__________Argo Project Argo CD security bypassPlatforms Affected:Argo CD Argo CD 1.8.2 Argo Project Argo CD 2.3.13 Argo Project Argo CD...
Year: 2023
Siretta QUARTZ-GOLD buffer overflow | CVE-2022-41991
NAME__________Siretta QUARTZ-GOLD buffer overflowPlatforms Affected:Risk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Siretta QUARTZ-GOLD is vulnerable to a heap-based buffer overflow, caused by improper bounds...
Discourse cross-site scripting | CVE-2023-22468
NAME__________Discourse cross-site scriptingPlatforms Affected:Discourse Discourse 3.0.0 Discourse Discourse 3.1.0.beta1Risk Level:8.3Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Discourse is vulnerable to cross-site scripting, caused by improper...
Siretta QUARTZ-GOLD command execution | CVE-2022-42493
NAME__________Siretta QUARTZ-GOLD command executionPlatforms Affected:Risk Level:9.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION__________Siretta QUARTZ-GOLD could allow a remote attacker to execute arbitrary commands...
Siretta QUARTZ-GOLD command execution | CVE-2022-40222
NAME__________Siretta QUARTZ-GOLD command executionPlatforms Affected:Risk Level:9.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION__________Siretta QUARTZ-GOLD could allow a remote attacker to execute arbitrary commands...
BreachForums Database Leak Alert: TSA NoFly List
BreachForums - Databreach discussion & leaks forum. NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
BreachForums Database Leak Alert: demo[.]zeeroq[.]com
BreachForums - Databreach discussion & leaks forum. NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
Daily Vulnerability Trends: Sun Jan 29 2023
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2020-28362Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.CVE-2022-34718Windows TCP/IP...
Vice Society Ransomware Victim: Seguros Equinoccial
Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
Malware Analysis – smokeloader – a36b584de10085f700f75c6f21620bd2
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a36b584de10085f700f75c6f21620bd2SHA1: 8c8006245b3be3a36dfebeab999d8d01826cbe1cANALYSIS DATE: 2023-01-29T03:25:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – cce7765c14bdcec1e907d013a875be01
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: cce7765c14bdcec1e907d013a875be01SHA1: 776c2ab297b6a69ce27041b748413bd25133030eANALYSIS DATE: 2023-01-29T03:01:08ZTTPS: T1082, T1053, T1005, T1081,...
Malware Analysis – smokeloader – 0188b2bb7e59afd6100b75775561f073
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0188b2bb7e59afd6100b75775561f073SHA1: c29f3865c7e5dcbc53535eec9906f992153c7227ANALYSIS DATE: 2023-01-29T04:16:02ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – 376a3ccb90224d2ad5712bf04c0b9578
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:19, botnet:@2023@new, backdoor, discovery, infostealer, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 376a3ccb90224d2ad5712bf04c0b9578SHA1:...
Malware Analysis – djvu – 5b1d27c0cc55349def2cd69b3d33fdd9
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 5b1d27c0cc55349def2cd69b3d33fdd9SHA1: 20e54017c0112e97fdf95c1d46801a5b6c0e5c2cANALYSIS DATE: 2023-01-29T05:03:58ZTTPS: T1060, T1112, T1012, T1082,...
Malware Analysis – chaos – cc4c6842f8a31ee3ac6477b42d34acba
Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, persistence, ransomware, spyware, stealerMD5: cc4c6842f8a31ee3ac6477b42d34acbaSHA1: ce6e9918189e9187143e0e012356bec98988c035ANALYSIS DATE: 2023-01-29T05:22:04ZTTPS: T1005, T1081, T1082, T1060, T1112 ScoreMeaningExample10Known badA...
Malware Analysis – lockbit – 2525d5867b27f5ee3949880186c35ed7
Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, discovery, evasion, persistence, ransomwareMD5: 2525d5867b27f5ee3949880186c35ed7SHA1: 8fc6dd893d10eb3f4d7c06fda1d3e05a8c7ba8adANALYSIS DATE: 2023-01-29T05:23:02ZTTPS: T1490, T1046, T1082, T1107, T1060, T1112 ScoreMeaningExample10Known...
Malware Analysis – chaos – 99cc504910231308cd759c3c0b1a00ac
Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: 99cc504910231308cd759c3c0b1a00acSHA1: f884e5fcd3da589a0ee6036cb970e704cf511599ANALYSIS DATE: 2023-01-29T05:24:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Malware Analysis – chaos – d80c38192b6a2eb32833de68de263c66
Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, ransomwareMD5: d80c38192b6a2eb32833de68de263c66SHA1: c896d5f151481f5b4078f7ff67f3957abb9d97b8ANALYSIS DATE: 2023-01-29T05:23:03ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...
Malware Analysis – chaos – 3fdd9b2402350844b482aa6076e18d22
Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: 3fdd9b2402350844b482aa6076e18d22SHA1: 81034b4deb144ecdf21cb213e455a84ea319812cANALYSIS DATE: 2023-01-29T05:23:06ZTTPS: T1490, T1059, T1107, T1005, T1081, T1491, T1112,...
Vice Society Ransomware Victim: EGR
Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
Vice Society Ransomware Victim: Seguros Equinoccial
Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
Malware Analysis – ransomware – f1c1bb775bdefa793a8c6add1e10ab04
Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: f1c1bb775bdefa793a8c6add1e10ab04SHA1: beacb14113de8642e32b0ebbc41e3eb4a6146548ANALYSIS DATE: 2023-01-28T21:06:36ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Cobalt Stike Beacon Detected – 43[.]143[.]211[.]165:801
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 107[.]189[.]28[.]121:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
