Year: 2023

HackerOne Bug Bounty Disclosure: take-over-subdomain-undici-nodejs-org-cdn-cloudflare-netbyalgisec1337

January 11, 2023

Programme HackerOne Node.js Node.js Submitted by algisec1337 algisec1337 Report Take over subdomain undici.nodejs.org.cdn.cloudflare.net Full Report A considerable amount of time...

HackerOne Bug Bounty Disclosure: csrf-vulnerability-in-nextcloud-desktop-client-3-6-1-on-windows-when-clicking-malicious-linkbylukasreschke

January 11, 2023

Programme HackerOne Nextcloud Nextcloud Submitted by lukasreschke lukasreschke Report CSRF vulnerability in Nextcloud Desktop Client 3.6.1 on Windows when clicking...

Bug Bounty

BugCrowd Bug Bounty Disclosure: – I found a text injection – By Orange_hacker

January 11, 2023

The below information is fully automated and the information is captured from the BugCrowd Disclosure website. The information was correct...

c2f941e109d3f913b12d82efdcf116fea5d147fff783caba368c7d51f68e8e56

PowerHuntShares – Audit Script Designed In Inventory, Analyze, And Report Excessive Privileges Configured On Active Directory Domains

January 11, 2023

PowerHuntShares is design to automatically inventory, analyze, and report excessive privilege assigned to SMB shares on Active Directory domain joined...

LockBit 3.0 Ransomware Victim: circlevillecourt[.]com

January 11, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: datair[.]com

January 11, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Stike Beacon Detected – 116[.]204[.]211[.]163:443

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]132[.]122[.]84:80

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 87[.]251[.]67[.]166:80

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – lockbit – a8e0d56f8c67f1f7b6e592c12d87acab

January 11, 2023

Score: 10 MALWARE FAMILY: lockbitTAGS:family:lockbit, ransomwareMD5: a8e0d56f8c67f1f7b6e592c12d87acabSHA1: ed555f0162ea6ec5b8b8bada743cfc628d376274ANALYSIS DATE: 2023-01-11T09:07:12ZTTPS: T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Cobalt Stike Beacon Detected – 129[.]152[.]2[.]128:443

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 173[.]82[.]196[.]58:443

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 157[.]245[.]102[.]164:443

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]42[.]46[.]117:80

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – aurora – a750f4f224ae7af1c886b39d1c5800d4

January 11, 2023

Score: 10 MALWARE FAMILY: auroraTAGS:family:aurora, family:dcrat, family:djvu, family:icedid, family:smokeloader, family:vidar, botnet:19, campaign:3131022508, backdoor, banker, discovery, infostealer, loader, persistence, ransomware, rat,...

Malware Analysis – xmrig – f91a4f2fe37f1008f8f2b0d597dbd5fa

January 11, 2023

Score: 10 MALWARE FAMILY: xmrigTAGS:family:xmrig, discovery, evasion, exploit, minerMD5: f91a4f2fe37f1008f8f2b0d597dbd5faSHA1: 3293698ca35076659fbaaac4868ba57afc3e560dANALYSIS DATE: 2023-01-11T09:23:30ZTTPS: T1031, T1562, T1489, T1222, T1082, T1102, T1112...

Malware Analysis – smokeloader – 70d0f4ca40cba87f64e1d482c2eb7167

January 11, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 70d0f4ca40cba87f64e1d482c2eb7167SHA1: 2b375e2d01a2bcc809cb5f3adb94d7b2cbd05470ANALYSIS DATE: 2023-01-11T09:31:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – wannacry – 5c7fb0927db37372da25f270708103a2

January 11, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, persistence, ransomware, spyware, stealer, wormMD5: 5c7fb0927db37372da25f270708103a2SHA1: 120ed9279d85cbfa56e5b7779ffa7162074f7a29ANALYSIS DATE: 2023-01-11T09:07:49ZTTPS: T1107, T1490, T1082, T1005, T1081, T1060,...

Cobalt Stike Beacon Detected – 54[.]151[.]146[.]41:80

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 103[.]45[.]143[.]169:80

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]189[.]3[.]56:443

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]113[.]224[.]80:80

January 11, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – wannacry – 3e1358176d57982beb922f2902a37fad

January 11, 2023

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, bootkit, persistence, ransomware, wormMD5: 3e1358176d57982beb922f2902a37fadSHA1: db139653e9dd7c669efdfddd69c991b72dcb428bANALYSIS DATE: 2023-01-11T10:21:05ZTTPS: T1012, T1082, T1060, T1112, T1067, T1491 ScoreMeaningExample10Known...

Malware Analysis – discovery – 5a9d7261ca6fb48b5df18e3e5dcd12e4

January 11, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, persistence, ransomwareMD5: 5a9d7261ca6fb48b5df18e3e5dcd12e4SHA1: c5e5601e995437ff625939876c7cf5a30d8e29eaANALYSIS DATE: 2023-01-11T10:18:25ZTTPS: T1012, T1497, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA...

Year: 2023

HackerOne Bug Bounty Disclosure: take-over-subdomain-undici-nodejs-org-cdn-cloudflare-netbyalgisec1337

HackerOne Bug Bounty Disclosure: csrf-vulnerability-in-nextcloud-desktop-client-3-6-1-on-windows-when-clicking-malicious-linkbylukasreschke

BugCrowd Bug Bounty Disclosure: – I found a text injection – By Orange_hacker

PowerHuntShares – Audit Script Designed In Inventory, Analyze, And Report Excessive Privileges Configured On Active Directory Domains

LockBit 3.0 Ransomware Victim: circlevillecourt[.]com

LockBit 3.0 Ransomware Victim: datair[.]com

Cobalt Stike Beacon Detected – 116[.]204[.]211[.]163:443

Cobalt Stike Beacon Detected – 43[.]132[.]122[.]84:80

Cobalt Stike Beacon Detected – 87[.]251[.]67[.]166:80

Malware Analysis – lockbit – a8e0d56f8c67f1f7b6e592c12d87acab

Cobalt Stike Beacon Detected – 129[.]152[.]2[.]128:443

Cobalt Stike Beacon Detected – 173[.]82[.]196[.]58:443

Cobalt Stike Beacon Detected – 157[.]245[.]102[.]164:443

Cobalt Stike Beacon Detected – 101[.]42[.]46[.]117:80

Malware Analysis – aurora – a750f4f224ae7af1c886b39d1c5800d4

Malware Analysis – xmrig – f91a4f2fe37f1008f8f2b0d597dbd5fa

Malware Analysis – smokeloader – 70d0f4ca40cba87f64e1d482c2eb7167

Malware Analysis – wannacry – 5c7fb0927db37372da25f270708103a2

Cobalt Stike Beacon Detected – 54[.]151[.]146[.]41:80

Cobalt Stike Beacon Detected – 103[.]45[.]143[.]169:80

Cobalt Stike Beacon Detected – 107[.]189[.]3[.]56:443

Cobalt Stike Beacon Detected – 47[.]113[.]224[.]80:80

Malware Analysis – wannacry – 3e1358176d57982beb922f2902a37fad

Malware Analysis – discovery – 5a9d7261ca6fb48b5df18e3e5dcd12e4

808 Lines Of Bbc Basic And A Dream: Arm Architecture Turns 40

China Now America’s Number One Cyber Threat – Us Must Get Up To Speed

Data Watchdog Will Leave British Library Alone – Further Probes ‘not Worth Ourtime’

[Palo Alto Networks Security Advisories] CVE-2024-5920 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in PAN-OSEnables Impersonation of a Legitimate Administrator

[Palo Alto Networks Security Advisories] CVE-2024-3596 PAN-OS: CHAP and PAP When Used with RADIUS Authentication Lead toPrivilege Escalation

You may have missed