Score: 10 MALWARE FAMILY: auroraTAGS:family:aurora, family:dcrat, family:djvu, family:icedid, family:smokeloader, family:vidar, botnet:19, campaign:3131022508, backdoor, banker, discovery, infostealer, persistence, ransomware, rat, spyware,...
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 226c4d76864ef44497cd415d72a8b5b4SHA1: 2e968a4ea6b40e0461b955662b120041dcfb295cANALYSIS DATE: 2023-01-10T16:31:20ZTTPS: T1060, T1112, T1005, T1081,...
Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: d3c434ebded1f388346f59b2095fda9dSHA1: cd1729ccc527be0ddcfe775559010231ab13cb50ANALYSIS DATE: 2023-01-10T16:12:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: ec8284a8af78a184d3b3a8248bde7fb9SHA1: 982e3e1788426ee1a22eaaa97b9f843468b48fd5ANALYSIS DATE: 2023-01-10T16:19:29ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...
TerraLdr: A Payload Loader Designed With Advanced Evasion Features Details: no crt functions imported syscall unhooking using KnownDllUnhook api hashing...
Yet Another Testing & Auditing Solution The goal of YATAS is to help you create a secure AWS environment without...
Using MSPs to administer your cloud services Any conversation about securing cloud services will swiftly turn towards the cloud shared...
NAME__________NSA Ghidra command executionPlatforms Affected:NSA Ghidra 10.2.2Risk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________NSA Ghidra could allow a remote attacker to execute arbitrary commands...
NAME__________Axiell Iguana file inclusionPlatforms Affected:Risk Level:9.8Exploitability:UnprovenConsequences:File Manipulation DESCRIPTION__________Axiell Iguana could allow a remote attacker to include arbitrary files, cause by...
NAME__________Qualcomm Chipsets code executionPlatforms Affected:Qualcomm ChipsetsRisk Level:8.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Qualcomm Chipsets could allow a local attacker to execute arbitrary code on...
NAME__________Nexxt Amp300 routers command executionPlatforms Affected:Nexxt Amp300 ARN02304U8 42.103.1.5095Risk Level:8.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION__________Nexxt Amp300 routers could allow a remote...
NAME__________KubePi security bypassPlatforms Affected:Risk Level:9.4Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________KubePi could allow a remote attacker to bypass security restrictions, caused by the use...
NAME__________Qualcomm Chipsets code executionPlatforms Affected:Qualcomm ChipsetsRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Qualcomm Chipsets could allow a remote attacker to execute arbitrary code on...
NAME__________Feathers js code executionPlatforms Affected:Feathers.js Feathers.jsRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Feathers js could allow a remote attacker to execute arbitrary code on...
NAME__________CKEditor Integration UI cross-site request forgeryPlatforms Affected:Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________CKEditor Integration UI is vulnerable to cross-site request forgery, caused by...
NAME__________Qualcomm Chipsets code executionPlatforms Affected:Qualcomm ChipsetsRisk Level:8.1Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Qualcomm Chipsets could allow a local authenticated attacker to execute arbitrary code...
NAME__________Node.js sanitize-svg module cross-site scriptingPlatforms Affected:Risk Level:7.6Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Node.js sanitize-svg module is vulnerable to cross-site scripting, caused by improper validation...
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-41082Microsoft Exchange Server Remote Code Execution Vulnerability.CVE-2022-27666A heap buffer overflow flaw was...
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2efacf2c68013a4fb5cdf8783306df0bSHA1: c84baadfd99d7d64ff8df25849c67be71ce0fc82ANALYSIS DATE: 2023-01-10T03:10:55ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 3028c71d9207be63be223889aa8a88ffSHA1: c2a29df6ce78b4d55e504dbf232e36af4bdae49aANALYSIS DATE: 2023-01-10T03:33:26ZTTPS: T1053, T1012, T1082, T1005,...
Score: 10 MALWARE FAMILY: auroraTAGS:family:aurora, family:dcrat, family:djvu, family:icedid, family:redline, family:smokeloader, family:vidar, botnet:19, botnet:@2023@new, campaign:3131022508, backdoor, banker, discovery, infostealer, persistence, ransomware,...
Score: 10 MALWARE FAMILY: auroraTAGS:family:aurora, family:dcrat, family:djvu, family:icedid, family:smokeloader, family:vidar, botnet:19, campaign:3131022508, backdoor, banker, discovery, infostealer, loader, persistence, ransomware, rat,...
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: dfa606df6650fa08f70c4ab17aa58e0bSHA1: b3f22c9ab2bfb620727561596241aece5c62ed64ANALYSIS DATE: 2023-01-10T05:35:05ZTTPS: T1060, T1112, T1082, T1053,...
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
