Security

GALLIUM APT used a new PingPull RAT in recent campaigns

June 13, 2022

China-linked Gallium APT employed a previously undocumented RAT, tracked as PingPull, in recent cyber espionage campaign targeting South Asia, Europe,...

Update Chrome now: Four high risk vulnerabilities found

June 13, 2022

Users of Chrome have been advised to apply updates as soon as possible related to seven security vulnerabilities. CISA has...

HelloXD Ransomware operators install MicroBackdoor on target systems

June 13, 2022

Experts observed the HelloXD ransomware deploying a backdoor to facilitate persistent remote access to infected hosts. The HelloXD ransomware first appeared...

confluencePot – Simple Honeypot For Atlassian Confluence (CVE-2022-26134)

June 13, 2022

ConfluencePot is a simple honeypot for the Atlassian Confluence unauthenticated and remote OGNL injection vulnerability (CVE-2022-26134). About the vulnerability You...

Serious vulnerabilities found in ITarian software, patches available for SaaS products

June 13, 2022

Dutch research group DIVD has identified multiple vulnerabilities in ITarian products. In cooperation with DIVD, ITarian has made patches available...

A week in security (June 6 – June 12)

June 13, 2022

Last week on Malwarebytes Labs: FBI warns of scammers soliciting donations for UkraineMicrosoft autopatch is here…but can you use it?Prometheus...

Cobalt Stike Beacon Detected – 194[.]87[.]70[.]14:8080

June 13, 2022

Cobalt Stike Beacon Detected – 185[.]112[.]83[.]65:443

June 13, 2022

Cobalt Stike Beacon Detected – 82[.]157[.]153[.]129:80

June 13, 2022

Cobalt Stike Beacon Detected – 179[.]43[.]144[.]8:88

June 13, 2022

Cobalt Stike Beacon Detected – 150[.]158[.]212[.]148:10001

June 13, 2022

Cobalt Stike Beacon Detected – 114[.]132[.]163[.]195:443

June 13, 2022

Cobalt Stike Beacon Detected – 101[.]33[.]237[.]76:8848

June 13, 2022

Cobalt Stike Beacon Detected – 37[.]0[.]8[.]231:443

June 13, 2022

Cobalt Stike Beacon Detected – 82[.]156[.]10[.]245:8443

June 13, 2022

Cobalt Stike Beacon Detected – 194[.]165[.]16[.]60:443

June 13, 2022

Cobalt Stike Beacon Detected – 82[.]156[.]188[.]211:7777

June 13, 2022

Cobalt Stike Beacon Detected – 115[.]126[.]43[.]78:8080

June 13, 2022

Cobalt Stike Beacon Detected – 82[.]157[.]153[.]129:7777

June 13, 2022

Cobalt Stike Beacon Detected – 120[.]76[.]242[.]128:9443

June 13, 2022

Using WiFi connection probe requests to track users

June 13, 2022

Researchers at the University of Hamburg demonstrated that WiFi connection probe requests expose users to track. A group of academics...

Security Affairs newsletter Round 369 by Pierluigi Paganini

June 13, 2022

A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs for...

Cobalt Stike Beacon Detected – 54[.]75[.]240[.]93:80

June 13, 2022

Cobalt Stike Beacon Detected – 150[.]158[.]93[.]247:2222

June 13, 2022

Security

GALLIUM APT used a new PingPull RAT in recent campaigns

Update Chrome now: Four high risk vulnerabilities found

HelloXD Ransomware operators install MicroBackdoor on target systems

confluencePot – Simple Honeypot For Atlassian Confluence (CVE-2022-26134)

Serious vulnerabilities found in ITarian software, patches available for SaaS products

A week in security (June 6 – June 12)

Cobalt Stike Beacon Detected – 194[.]87[.]70[.]14:8080

Cobalt Stike Beacon Detected – 185[.]112[.]83[.]65:443

Cobalt Stike Beacon Detected – 82[.]157[.]153[.]129:80

Cobalt Stike Beacon Detected – 179[.]43[.]144[.]8:88

Cobalt Stike Beacon Detected – 150[.]158[.]212[.]148:10001

Cobalt Stike Beacon Detected – 114[.]132[.]163[.]195:443

Cobalt Stike Beacon Detected – 101[.]33[.]237[.]76:8848

Cobalt Stike Beacon Detected – 37[.]0[.]8[.]231:443

Cobalt Stike Beacon Detected – 82[.]156[.]10[.]245:8443

Cobalt Stike Beacon Detected – 194[.]165[.]16[.]60:443

Cobalt Stike Beacon Detected – 82[.]156[.]188[.]211:7777

Cobalt Stike Beacon Detected – 115[.]126[.]43[.]78:8080

Cobalt Stike Beacon Detected – 82[.]157[.]153[.]129:7777

Cobalt Stike Beacon Detected – 120[.]76[.]242[.]128:9443

Using WiFi connection probe requests to track users

Security Affairs newsletter Round 369 by Pierluigi Paganini

Cobalt Stike Beacon Detected – 54[.]75[.]240[.]93:80

Cobalt Stike Beacon Detected – 150[.]158[.]93[.]247:2222

Google Chrome Multiple Vulnerabilities

After More Than Half A Century, The Voyage Of Kosmos 482 Is Over

[INCRANSOM] – Ransomware Victim: GARDNER ORTHOPEDICS

Cobalt Strike Beacon Detected – 106[.]53[.]191[.]52:80

[LYNX] – Ransomware Victim: Royal Chemical

You may have missed