RedPacket Security - InfoSec News & Tutorials

Sewio RTLS code execution | CVE-2022-41989

January 13, 2023

NAME__________Sewio RTLS code executionPlatforms Affected:Drupal Private Taxonomy Terms module for Drupal 8.x-2.5Risk Level:9Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Sewio RTLS could allow a remote...

Cloudflare WARP Client privilege escalation | CVE-2022-4428

January 13, 2023

NAME__________Cloudflare WARP Client privilege escalationPlatforms Affected:Cloudflare WARP Client 2022.10.106.0Risk Level:8.9Exploitability:UnprovenConsequences:Gain Privilege DESCRIPTION__________Cloudflare WARP Client could allow a remote authenticated attacker...

PIXELA PIX-RT100 routers security bypass | CVE-2023-22316

January 13, 2023

NAME__________PIXELA PIX-RT100 routers security bypassPlatforms Affected:PIXELA PIX-RT100 RT100_TEQ_2.1.1_EQ101 PIXELA PIX-RT100 RT100_TEQ_2.1.2_EQ101Risk Level:8.8Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________PIXELA PIX-RT100 routers could allow a remote...

SugarCRM code execution | CVE-2023-22952

January 13, 2023

NAME__________SugarCRM code executionPlatforms Affected:SugarCRM SugarCRM 11.0 SugarCRM SugarCRM 12.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________SugarCRM could allow a remote authenticated attacker to execute...

Sewio RTLS cross-site request forgery | CVE-2022-47395

January 13, 2023

NAME__________Sewio RTLS cross-site request forgeryPlatforms Affected:Drupal Private Taxonomy Terms module for Drupal 8.x-2.5Risk Level:8.1Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Sewio RTLS is vulnerable to...

Daily Vulnerability Trends: Fri Jan 13 2023

January 13, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-41080Microsoft Exchange Server Elevation of Privilege Vulnerability. This CVE ID is unique...

LockBit 3.0 Ransomware Victim: fujikura-electronics[.]co[.]th

January 13, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

BlackCat/ALPHV Ransomware Victim: Air Comm Corporation

January 13, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: Fu Yu Corporation

January 13, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Royal Ransomware Victim: T A Supply

January 13, 2023

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Royal Ransomware Victim: Chinery and Douglas

January 13, 2023

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Cobalt Stike Beacon Detected – 43[.]143[.]213[.]120:443

January 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 194[.]55[.]186[.]206:8011

January 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]172[.]206[.]242:443

January 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]174[.]247[.]46:9443

January 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – sodinokibi – 8a7c7ef298134fbb1dc660e3ce11897e

January 13, 2023

Score: 10 MALWARE FAMILY: sodinokibiTAGS:family:sodinokibi, botnet:5, campaign:367, ransomware, spyware, stealerMD5: 8a7c7ef298134fbb1dc660e3ce11897eSHA1: 759324cde77d121bea646bb5b14a10cb6e90cf70ANALYSIS DATE: 2023-01-12T20:44:42ZTTPS: T1107, T1490, T1491, T1112, T1130, T1012,...

Malware Analysis – quasar – 214bb6347cffeb07969a31d0cc01c0c9

January 13, 2023

Score: 10 MALWARE FAMILY: quasarTAGS:family:quasar, evasion, persistence, ransomware, spyware, trojanMD5: 214bb6347cffeb07969a31d0cc01c0c9SHA1: a473b46a2a03a9b36925175ddc2598810a1bf3a5ANALYSIS DATE: 2023-01-12T21:54:40ZTTPS: T1082, T1112, T1060, T1130, T1102, T1107,...

Malware Analysis – glupteba – 35dc42a422a763d61cdf19cee9b5f48a

January 13, 2023

Score: 10 MALWARE FAMILY: gluptebaTAGS:family:glupteba, family:redline, botnet:bharat, discovery, dropper, evasion, infostealer, loader, persistence, ransomware, trojan, vmprotectMD5: 35dc42a422a763d61cdf19cee9b5f48aSHA1: b2f51efcd7dc3f8a10d0362890c392757596222aANALYSIS DATE: 2023-01-12T21:04:56ZTTPS:...

Cobalt Stike Beacon Detected – 193[.]149[.]176[.]214:80

January 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]188[.]86[.]194:88

January 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 106[.]54[.]62[.]242:5555

January 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]207[.]8[.]194:800

January 13, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – amadey – a324ed7b304360cc9ed41e619478b953

January 13, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, family:socelars, family:vidar, botnet:19, botnet:494, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: a324ed7b304360cc9ed41e619478b953SHA1: 7e9094fb9c32ad70bc9cb9df3202d5b068e1f415ANALYSIS...

Malware Analysis – evasion – 23d173a46e32cbafcce943108f6ce5f2

January 13, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 23d173a46e32cbafcce943108f6ce5f2SHA1: 0d764bf3eb47f4b3e597b0f6d6e28e504d018c63ANALYSIS DATE: 2023-01-12T22:36:43ZTTPS: T1490, T1107 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Main Story

Insider Threat Management Unlocked: A Practical Guide for 2025

Editor’s Picks

Trending Story

Featured Story

You may have missed