RedPacket Security - InfoSec News & Tutorials

Malware Analysis – discovery – 4b51df4028f1d801c45f07daa07d9c90

January 29, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: 4b51df4028f1d801c45f07daa07d9c90SHA1: 0a46c206f4abd891bb67d9ebfd55d572aa0456d3ANALYSIS DATE: 2023-01-29T11:01:21ZTTPS: T1012, T1082, T1112, T1042, T1060 ScoreMeaningExample10Known badA malware family...

Cobalt Stike Beacon Detected – 47[.]244[.]167[.]171:4545

January 29, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – spyware – 5e887fdac8a3cac0b047a737043789a8

January 29, 2023

Score: 7 MALWARE FAMILY: spywareTAGS:spyware, stealerMD5: 5e887fdac8a3cac0b047a737043789a8SHA1: 8c9745138d835b783278cb61170a7153bb003784ANALYSIS DATE: 2023-01-29T11:17:02ZTTPS: T1005, T1081 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Cobalt Stike Beacon Detected – 20[.]189[.]74[.]59:8443

January 29, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – smokeloader – da627411e7e85229355ed325520a7d4e

January 29, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: da627411e7e85229355ed325520a7d4eSHA1: 3a603f52b7285be51b1533815eecc67b0447af35ANALYSIS DATE: 2023-01-29T11:35:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – discovery – 360ef53ce1b09b03998bf2ab743f7dc7

January 29, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomware, spyware, stealerMD5: 360ef53ce1b09b03998bf2ab743f7dc7SHA1: 9166c3760b1d1cf9a395e344858e4e01158795bcANALYSIS DATE: 2023-01-29T11:09:44ZTTPS: T1060, T1012, T1005, T1081, T1082, T1059, T1102,...

Malware Analysis – – bfe6ee8069f6e7c572382a97fd16d104

January 29, 2023

Score: 3 MALWARE FAMILY: TAGS:MD5: bfe6ee8069f6e7c572382a97fd16d104SHA1: e017c8f52a53cd0374d7867af14e567b79d6cffdANALYSIS DATE: 2023-01-29T11:33:49ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Cobalt Stike Beacon Detected – 3[.]29[.]24[.]212:8080

January 29, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 54[.]188[.]58[.]32:443

January 29, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 109[.]172[.]45[.]28:443

January 29, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Siretta QUARTZ-GOLD directory traversal | CVE-2022-41154

January 29, 2023

NAME__________Siretta QUARTZ-GOLD directory traversalPlatforms Affected:Risk Level:8.2Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Siretta QUARTZ-GOLD could allow a remote attacker to traverse directories on the system,...

Argo Project Argo CD security bypass | CVE-2023-22736

January 29, 2023

NAME__________Argo Project Argo CD security bypassPlatforms Affected:Argo Project Argo CD 2.5.7 Argo Project Argo CD 2.6.0-rc4 Argo Project Argo CD...

Siretta QUARTZ-GOLD command execution |

January 29, 2023

NAME__________Siretta QUARTZ-GOLD command executionPlatforms Affected:Risk Level:9.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION__________Siretta QUARTZ-GOLD could allow a remote attacker to execute arbitrary commands...

UFLO2 code execution | CVE-2022-25894

January 29, 2023

NAME__________UFLO2 code executionPlatforms Affected:Risk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________UFLO2 could allow a remote attacker to execute arbitrary code on the system, caused...

Pi-hole security bypass | CVE-2023-23614

January 29, 2023

NAME__________Pi-hole security bypassPlatforms Affected:Pi-hole Pi-hole 4.0 Pi-hole Pi-hole 5.18.2Risk Level:8.8Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Pi-hole could allow a remote authenticated attacker to bypass...

BaiCells Nova 227, Nova 233, Nova 243, and Nova 246 LTE TDD eNodeB devices code execution | CVE-2023-24508

January 29, 2023

NAME__________BaiCells Nova 227, Nova 233, Nova 243, and Nova 246 LTE TDD eNodeB devices code executionPlatforms Affected:BaiCells Nova 246 RTS/RTD...

Siretta QUARTZ-GOLD command execution | CVE-2022-42491

January 29, 2023

Siretta QUARTZ-GOLD command execution | CVE-2022-42492

January 29, 2023

Argo Project Argo CD security bypass | CVE-2023-22482

January 29, 2023

NAME__________Argo Project Argo CD security bypassPlatforms Affected:Argo CD Argo CD 1.8.2 Argo Project Argo CD 2.3.13 Argo Project Argo CD...

Siretta QUARTZ-GOLD buffer overflow | CVE-2022-41991

January 29, 2023

NAME__________Siretta QUARTZ-GOLD buffer overflowPlatforms Affected:Risk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Siretta QUARTZ-GOLD is vulnerable to a heap-based buffer overflow, caused by improper bounds...

Discourse cross-site scripting | CVE-2023-22468

January 29, 2023

NAME__________Discourse cross-site scriptingPlatforms Affected:Discourse Discourse 3.0.0 Discourse Discourse 3.1.0.beta1Risk Level:8.3Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Discourse is vulnerable to cross-site scripting, caused by improper...

Main Story

Fortifying the Supply Chain through Practical Security for Modern Organizations

Security Awareness Training that Works for Changing Employee Behavior

Editor’s Picks

Trending Story

Featured Story

You may have missed