cyberveille.decio.ch

cyberveille.decio.ch

5334 bookmarks
Custom sorting
Wordfence Firewall Blocks Bizarre Large-Scale XSS Campaign
Wordfence Firewall Blocks Bizarre Large-Scale XSS Campaign
The Wordfence Threat Intelligence team has been monitoring an increase in attacks targeting a Cross-Site Scripting vulnerability in Beautiful Cookie Consent Banner, a WordPress plugin installed on over 40,000 sites. The vulnerability, which was fully patched in January in version 2.10.2, offers unauthenticated attackers the ability to add malicious JavaScript to a website, potentially allowing ...Read More
#wordfence#EN#2023#Beautiful-Cookie-Consent-Banner#plugin#WordPress#XSS#Campaign
·wordfence.com·
Wordfence Firewall Blocks Bizarre Large-Scale XSS Campaign
MalasLocker ransomware targets Zimbra servers, demands charity donation
MalasLocker ransomware targets Zimbra servers, demands charity donation
A new ransomware operation is hacking Zimbra servers to steal emails and encrypt files. However, instead of demanding a ransom payment, the threat actors claim to require a donation to charity to provide an encryptor and prevent data leaking.
#bleepingcomputer#Age-Encryption#AgeLocker#Charity#Email#MalasLocker#QNAP#Ransomware#Zimbra
·bleepingcomputer.com·
MalasLocker ransomware targets Zimbra servers, demands charity donation
Lemon Group’s Cybercriminal Businesses Built on Preinfected Devices
Lemon Group’s Cybercriminal Businesses Built on Preinfected Devices
An overview of the Lemon Group’s use of preinfected mobile devices, and how this scheme is potentially being developed and expanded to other internet of things (IoT) devices. This research was presented in full at the Black Hat Asia 2023 Conference in Singapore in May 2023.
#trendmicro#EN#2023#malware#cyber-crime#LemonGroup#Preinfected#Guerrilla#Android#mobile#mobile-device#IoT#AndroidOS_Guerilla
·trendmicro.com·
Lemon Group’s Cybercriminal Businesses Built on Preinfected Devices
Visualizing QakBot Infrastructure
Visualizing QakBot Infrastructure
This blog post seeks to draw out some high-level trends and anomalies based on our ongoing tracking of QakBot command and control (C2) infrastructure. By looking at the data with a broader scope, we hope to supplement other research into this particular threat family, which in general focuses on specific infrastructure elements; e.g., daily alerting on active C2 servers.
#team-cymru#EN#2023#QakBot#Infrastructure#research#C2
·team-cymru.com·
Visualizing QakBot Infrastructure
Securonix Threat Labs Security Advisory: Latest Update: Ongoing MEME#4CHAN Attack/Phishing Campaign uses Meme-Filled Code to Drop XWorm Payloads
Securonix Threat Labs Security Advisory: Latest Update: Ongoing MEME#4CHAN Attack/Phishing Campaign uses Meme-Filled Code to Drop XWorm Payloads
An unusual attack/phishing campaign delivering malware while using meme-filled code and complex obfuscation methods continues dropping Xworm payloads for the last few months and is still ongoing today.
#securonix#EN#2023#XWorm#Payloads#MEME4CHAN#Phishing#Meme-Filled
·securonix.com·
Securonix Threat Labs Security Advisory: Latest Update: Ongoing MEME#4CHAN Attack/Phishing Campaign uses Meme-Filled Code to Drop XWorm Payloads