Experts linked Maui ransomware to North Korean Andariel APT
Cybersecurity researchers from Kaspersky linked the Maui ransomware to the North Korea-backed Andariel APT group. Kaspersky linked with medium confidence...
Chinese actors behind attacks on industrial enterprises and public institutions
China-linked threat actors targeted dozens of industrial enterprises and public institutions in Afghanistan and Europe. In January 2022, researchers at...
MrKaplan – Tool Aimed To Help Red Teamers To Stay Hidden By Clearing Evidence Of Execution
MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution. It works by...
US sanctioned crypto mixer Tornado Cash used by North Korea-linked APT
The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) sanctioned the crypto mixer service Tornado Cash used by North...
Cobalt Stike Beacon Detected – 1[.]15[.]74[.]201:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 3[.]8[.]114[.]161:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 47[.]242[.]201[.]221:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 39[.]102[.]50[.]219:5555
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 124[.]221[.]233[.]178:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 114[.]116[.]40[.]60:666
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 120[.]25[.]157[.]131:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 121[.]4[.]74[.]162:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 146[.]70[.]24[.]162:8080
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 124[.]70[.]21[.]157:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 175[.]24[.]172[.]151:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 35[.]79[.]250[.]125:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 1[.]14[.]45[.]136:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 121[.]40[.]250[.]127:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 114[.]116[.]21[.]215:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malicious file analysis – Example 01
Cyber Security Specialist Zoziel Pinto Freire shows an example of malicious file analysis presented during his lecture on BSides-Vitória 2022....
Node.js node-example.ts module code execution |
NAME Node.js node-example.ts module code execution Platforms Affected:Node.js node-example.tsRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Node.js node-example.ts module could allow a remote attacker...
Cockpit security bypass | CVE-2022-2713
NAME Cockpit security bypass Platforms Affected:Cockpit Cockpit 2.1.2Risk Level:8.6Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION Cockpit could allow a remote attacker to bypass security...
Nortek Linear eMerge E3-Series information disclosure | CVE-2022-31269
NAME Nortek Linear eMerge E3-Series information disclosure Platforms Affected:Nortek Linear eMerge E3-Series 0.32-07e Nortek Linear eMerge E3-Series 0.32-07p Nortek Linear...
Nortek Linear eMerge E3-Series session hijacking | CVE-2022-31798
NAME Nortek Linear eMerge E3-Series session hijacking Platforms Affected:Nortek Linear eMerge E3-Series 0.32-07pRisk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Nortek Linear eMerge E3-Series...
