Updated TikTok Privacy Policy confirms that Chinese staff can access European users’ data
TikTok updated its privacy policy for European Economic Area (“EEA”) and confirmed that its Chinese staff can access their users’ data....
Fortinet FortiADC cross-site scripting | CVE-2022-35851
NAME Fortinet FortiADC cross-site scripting Platforms Affected:Fortinet FortiADC 7.1.0Risk Level:8Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION Fortinet FortiADC is vulnerable to cross-site scripting, caused...
Fortinet FortiAnalyzer and Fortinet FortiManager cross-site scripting | CVE-2022-39950
NAME Fortinet FortiAnalyzer and Fortinet FortiManager cross-site scripting Platforms Affected:Risk Level:8Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION Fortinet FortiAnalyzer and Fortinet FortiManager are vulnerable...
IP-COM EW9 command execution | CVE-2022-43367
NAME IP-COM EW9 command execution Platforms Affected:Risk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION IP-COM EW9 could allow a remote attacker to execute arbitrary...
XenSource Xen Xenstore privilege escalation | CVE-2022-42320
NAME XenSource Xen Xenstore privilege escalation Platforms Affected:XenSource XenRisk Level:8.4Exploitability:UnprovenConsequences:Gain Privilege DESCRIPTION XenSource Xen could allow a local attacker to...
Sanitization Management System SQL injection | CVE-2022-43355
NAME Sanitization Management System SQL injection Platforms Affected:Risk Level:7.2Exploitability:HighConsequences:Data Manipulation DESCRIPTION Sanitization Management System is vulnerable to SQL injection. A...
Fortinet FortiADC cross-site scripting | CVE-2022-38374
NAME Fortinet FortiADC cross-site scripting Platforms Affected:Fortinet FortiADC 6.2.0 Fortinet FortiADC 7.0.2 Fortinet FortiADC 7.0.0 Fortinet FortiADC 6.2.4Risk Level:8.8Exploitability:HighConsequences:Cross-Site Scripting...
Fortinet fixed 16 vulnerabilities, 6 rated as high severity
Fortinet addressed 16 vulnerabilities in some of the company’s products, six flaws received a ‘high’ severity rate. One of the...
Daily Vulnerability Trends: Thu Nov 03 2022
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-22241An Improper Input Validation vulnerability in the J-Web component of Juniper Networks...
Server-side attacks, C&C in public clouds and other MDR cases we observed
Introduction This report describes several interesting incidents observed by the Kaspersky Managed Detection and Response (MDR) team. The goal of the...
Malware Analysis – wannacry – 58088f35c31731e82afdc9157e1418c8
Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 58088f35c31731e82afdc9157e1418c8SHA1: fc6fc4739db9e837618ec5d5047cc1a8d5d4a57eANALYSIS DATE: 2022-11-03T03:00:25ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – djvu – bd8f00d5443c21442f9e9ee7dc656504
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: bd8f00d5443c21442f9e9ee7dc656504SHA1: 87335c5e32b8a6609e5e53e50ee47c2167f21f37ANALYSIS...
Malware Analysis – amadey – 432c4e1f72cb160beceac60a75add7fc
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 432c4e1f72cb160beceac60a75add7fcSHA1:...
Malware Analysis – djvu – e28c92d67de5b0e50656cd64bc43d609
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: e28c92d67de5b0e50656cd64bc43d609SHA1: ae111a18223d9c9b84b3d46b58b383edd17b7d78ANALYSIS DATE: 2022-11-03T03:31:45ZTTPS: T1222, T1005, T1081, T1012, T1082, T1060,...
Malware Analysis – djvu – 0f3a951d4b9f1c2717429eb512b6a35f
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, botnet:mario23_10, botnet:slovarik1btc, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 0f3a951d4b9f1c2717429eb512b6a35fSHA1: de70f63ab89c1eaace1e8ba295883853bbf40168ANALYSIS...
Malware Analysis – djvu – 7940034ef696a5864e8987d5831f5982
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 7940034ef696a5864e8987d5831f5982SHA1: c2341db13c0d705c8f6b0c0096a45f112bafe92bANALYSIS DATE: 2022-11-03T05:40:38ZTTPS: T1012, T1082, T1005, T1081, T1222, T1053,...
Malware Analysis – djvu – 7d281af034cbaaf29f1c7683d83b0816
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 7d281af034cbaaf29f1c7683d83b0816SHA1: 8ef1c438915f07f323243011c849169666111642ANALYSIS DATE: 2022-11-03T05:00:41ZTTPS: T1082, T1053, T1005, T1081, T1012, T1222,...
Malware Analysis – amadey – 60be5c9c87907487fe1314ccaa7a5779
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, botnet:google2, botnet:mario23_10, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 60be5c9c87907487fe1314ccaa7a5779SHA1:...
Cobalt Stike Beacon Detected – 192[.]3[.]153[.]207:808
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 23[.]227[.]198[.]232:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 164[.]92[.]190[.]196:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 80[.]66[.]76[.]77:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 84[.]32[.]128[.]141:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]224[.]249[.]36:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
