Year: 2023

Malware Analysis – djvu – cabb11a8e237ff7233e19b9cb6cc829d

April 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: cabb11a8e237ff7233e19b9cb6cc829dSHA1: ffe487aba123018573a275adfe98c44d1cee9c77ANALYSIS DATE: 2023-04-29T15:35:17ZTTPS: T1060, T1112, T1222, T1053,...

Malware Analysis – persistence – 09250d8b8323c62fb59941b458fa70d1

April 29, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: 09250d8b8323c62fb59941b458fa70d1SHA1: da5f6347207257139ac82b50bc8276de9c1afd9eANALYSIS DATE: 2023-04-29T15:39:47ZTTPS: T1112, T1060, T1012, T1120, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – amadey – 845774441d6a856cfb4529fdef819fda

April 29, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1616034f091df9fd0229bc38dd17597f, botnet:5cb879265de0011bfc7588d5d251aee6, botnet:potok 2, botnet:pub1, backdoor, discovery, evasion, infostealer, persistence, ransomware,...

Malware Analysis – amadey – cea30f806e644cebe48399eefa345e51

April 29, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:icedid, family:redline, family:smokeloader, family:vidar, botnet:1616034f091df9fd0229bc38dd17597f, botnet:5cb879265de0011bfc7588d5d251aee6, botnet:potok 2, botnet:pub1, campaign:252847557, backdoor, banker, discovery, evasion,...

Malware Analysis – ransomware – b55fca9a67bd38321a51a8724b61ee12

April 29, 2023

Score: 7 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b55fca9a67bd38321a51a8724b61ee12SHA1: 99e8e1961755df056c605ca052e92da3ddb0a3d3ANALYSIS DATE: 2023-04-29T15:56:53ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 1420395c269bb059c6f60d8faee97088

April 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, spyware, stealerMD5: 1420395c269bb059c6f60d8faee97088SHA1: 1c3662586dcf5451f479d7c1812a22cc9db25dbdANALYSIS DATE: 2023-04-29T16:22:32ZTTPS: T1012, T1082, T1005, T1081,...

HackerOne Bug Bounty Disclosure: name-collision-of-shared-foldersbyaslfv

April 29, 2023

Programme HackerOne Nextcloud Nextcloud Submitted by aslfv aslfv Report Name collision of shared folders Full Report A considerable amount...

HackerOne Bug Bounty Disclosure: reference-fetch-can-saturate-the-server-bandwidth-for-10-secondsbybrthnc

April 29, 2023

Programme HackerOne Nextcloud Nextcloud Submitted by brthnc brthnc Report Reference fetch can saturate the server bandwidth for 10 seconds Full...

Black Basta Ransomware Victim: BLUME

April 29, 2023

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Black Basta Ransomware Victim: TAMMAC

April 29, 2023

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Black Basta Ransomware Victim: AUTOCAM MEDICAL

April 29, 2023

Black Basta Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: baughmanco[.]com

April 29, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

IBM Db2 denial of service | CVE-2023-27555

April 29, 2023

NAME__________IBM Db2 denial of servicePlatforms Affected:IBM DB2 for Linux UNIX and Windows 11.5Risk Level:5.1Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________IBM Db2 for Linux,...

IBM DB2 for Linux, UNIX and Windows denial of service | CVE-2023-29255

April 29, 2023

NAME__________IBM DB2 for Linux, UNIX and Windows denial of servicePlatforms Affected:IBM DB2 for Linux UNIX and Windows 10.5 IBM DB2...

IBM Db2 denial of service | CVE-2023-26021

April 29, 2023

NAME__________IBM Db2 denial of servicePlatforms Affected:IBM DB2 for Linux UNIX and Windows 11.1 IBM DB2 for Linux UNIX and Windows...

IBM Db2 denial of service | CVE-2023-26022

April 29, 2023

NAME__________IBM Db2 denial of servicePlatforms Affected:IBM DB2 for Linux UNIX and Windows 10.5 IBM DB2 for Linux UNIX and Windows...

Vinga WR-AC1200 code execution | CVE-2023-24796

April 29, 2023

NAME__________Vinga WR-AC1200 code executionPlatforms Affected:Risk Level:7.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Vinga WR-AC1200 could allow a remote attacker to execute arbitrary code on the...

Click to Call or Chat Buttons Plugin for WordPress cross-site scripting | CVE-2023-25710

April 29, 2023

NAME__________Click to Call or Chat Buttons Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Click to Call or Chat Buttons Plugin for...

Service Location Protocol (SLP, RFC 2608) denial of service | CVE-2023-29552

April 29, 2023

NAME__________Service Location Protocol (SLP, RFC 2608) denial of servicePlatforms Affected:Risk Level:6.8Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Service Location Protocol (SLP, RFC 2608) is...

Custom Archive Templates Plugin for WordPress cross-site scripting | CVE-2023-25490

April 29, 2023

NAME__________Custom Archive Templates Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Custom Archive Templates Plugin for WordPress 1.7.4Risk Level:5.9Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Custom Archive...

JSON Content Importer Plugin for WordPress cross-site scripting | CVE-2023-25485

April 29, 2023

NAME__________JSON Content Importer Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress JSON Content Importer Plugin for WordPress 1.3.15Risk Level:5.9Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________JSON Content...

Simple Yearly Archive Plugin for WordPress cross-site scripting | CVE-2023-25484

April 29, 2023

NAME__________Simple Yearly Archive Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Simple Yearly Archive Plugin for WordPress 2.1.8Risk Level:5.9Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Simple Yearly...

Regina Lite Theme for WordPress cross-site scripting | CVE-2023-27619

April 29, 2023

NAME__________Regina Lite Theme for WordPress cross-site scriptingPlatforms Affected:WordPress Regina Lite Theme for WordPress 2.0.7Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Regina Lite Theme for...

Faculty Evaluation System SQL injection | CVE-2023-2367

April 29, 2023

NAME__________Faculty Evaluation System SQL injectionPlatforms Affected:Risk Level:4.7Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Faculty Evaluation System is vulnerable to SQL injection. A remote authenticated attacker...

Year: 2023

Malware Analysis – djvu – cabb11a8e237ff7233e19b9cb6cc829d

Malware Analysis – persistence – 09250d8b8323c62fb59941b458fa70d1

Malware Analysis – amadey – 845774441d6a856cfb4529fdef819fda

Malware Analysis – amadey – cea30f806e644cebe48399eefa345e51

Malware Analysis – ransomware – b55fca9a67bd38321a51a8724b61ee12

Malware Analysis – djvu – 1420395c269bb059c6f60d8faee97088

HackerOne Bug Bounty Disclosure: name-collision-of-shared-foldersbyaslfv

HackerOne Bug Bounty Disclosure: reference-fetch-can-saturate-the-server-bandwidth-for-10-secondsbybrthnc

Black Basta Ransomware Victim: BLUME

Black Basta Ransomware Victim: TAMMAC

Black Basta Ransomware Victim: AUTOCAM MEDICAL

LockBit 3.0 Ransomware Victim: baughmanco[.]com

IBM Db2 denial of service | CVE-2023-27555

IBM DB2 for Linux, UNIX and Windows denial of service | CVE-2023-29255

IBM Db2 denial of service | CVE-2023-26021

IBM Db2 denial of service | CVE-2023-26022

Vinga WR-AC1200 code execution | CVE-2023-24796

Click to Call or Chat Buttons Plugin for WordPress cross-site scripting | CVE-2023-25710

Service Location Protocol (SLP, RFC 2608) denial of service | CVE-2023-29552

Custom Archive Templates Plugin for WordPress cross-site scripting | CVE-2023-25490

JSON Content Importer Plugin for WordPress cross-site scripting | CVE-2023-25485

Simple Yearly Archive Plugin for WordPress cross-site scripting | CVE-2023-25484

Regina Lite Theme for WordPress cross-site scripting | CVE-2023-27619

Faculty Evaluation System SQL injection | CVE-2023-2367

NCSC Urges Software Vendors to Eliminate Unforgivable Vulnerabilities

UK Organizations Increase Cybersecurity Budgets by 31%

Exposed Database Leaks Sensitive Data from DeepSeek’s AI Chatbot

Ransomware Attack Impacting Blood Donation Services in the US

Syncjacking Attack: A New Threat to Browser and Device Security

You may have missed