OSINT

Malware Analysis – gandcrab – faebc8605aa6ae0210b3d7332a4085b4

March 24, 2023

Score: 10 MALWARE FAMILY: gandcrabTAGS:family:gandcrab, backdoor, persistence, ransomwareMD5: faebc8605aa6ae0210b3d7332a4085b4SHA1: 0da4e0038853df664af34d14a20cb7ae48a35cfaANALYSIS DATE: 2023-03-24T18:43:29ZTTPS: T1060, T1112, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malicious Python Package Uses Unicode Trickery to Evade Detection and Steal Data

March 24, 2023

A malicious Python package on the Python Package Index (PyPI) repository has been found to use Unicode as a trick...

THN Webinar: Inside the High Risk of 3rd-Party SaaS Apps

March 24, 2023

Any app that can improve business operations is quickly added to the SaaS stack. However, employees don't realize that this...

GitHub Swiftly Replaces Exposed RSA SSH Key to Protect Git Operations

March 24, 2023

Cloud-based repository hosting service GitHub said it took the step of replacing its RSA SSH host key used to secure...

Researchers Uncover Chinese Nation State Hackers’ Deceptive Attack Strategies

March 24, 2023

A recent campaign undertaken by Earth Preta indicates that nation-state groups aligned with China are getting increasingly proficient at bypassing...

LockBit 3.0 Ransomware Victim: bianchiindustry[.]com

March 24, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Vice Society Ransomware Victim: Autoridad de Acueductos Y Alcantarillados

March 24, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Critical WooCommerce Payments Plugin Flaw Patched for 500,000+ WordPress Sites

March 24, 2023

Patches have been released for a critical security flaw impacting the WooCommerce Payments plugin for WordPress, which is installed on...

Exploit released for Veeam bug allowing cleartext credential theft

March 24, 2023

Cross-platform exploit code is now available for a high-severity Backup Service vulnerability impacting Veeam's Backup & Replication (VBR) software. The...

Python info-stealing malware uses Unicode to evade detection

March 24, 2023

A malicious Python package on PyPI uses Unicode as an obfuscation technique to evade detection while stealing and exfiltrating developers'...

CloudPanel installations use the same SSL certificate private key

March 24, 2023

Self-hosted web administration solution CloudPanel was found to have several security issues, including using the same SSL certificate private key...

Microsoft Teams, Virtualbox, Tesla zero-days exploited at Pwn2Own

March 24, 2023

During the second day of Pwn2Own Vancouver 2023, competitors were awarded $475,000 after successfully exploiting 10 zero-days in multiple products....

New CISA tool detects hacking activity in Microsoft cloud services

March 24, 2023

The U.S. Cybersecurity & Infrastructure Security Agency (CISA) has released a new open-source incident response tool that helps detect signs...

BlackGuard stealer now targets 57 crypto wallets, extensions

March 24, 2023

A new variant of the BlackGuard stealer has been spotted in the wild, featuring new capabilities like USB propagation, persistence...

City of Toronto confirms data theft, Clop claims responsibility

March 24, 2023

City of Toronto is among Clop ransomware gang's latest victims hit in the ongoing GoAnywhere hacking spree. Other victims listed alongside the Toronto city...

WordPress force patching WooCommerce plugin with 500K installs

March 24, 2023

Automattic, the company behind the WordPress content management system, is force installing a security update on hundreds of thousands of...