Do Son The payloads involved in the exploitation were identified as PureCrypter, which has previously been documented by Any Run
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
CVE-2024-30040, a Security Feature Bypass vulnerability in Windows MSHTML, could allow attackers to bypass security measures
Proofpoint uncovered a massive campaign distributing LockBit Black ransomware through millions of emails via the Phorpiex botnet
The EDR diagram confirms the presence of these commands, leading to the download of the DanaBot malware from the command-and-control server
Ebury is used to deploy additional malware, including malicious Apache and nginx modules that facilitate web traffic redirection
These flaws, tracked as CVE-2024-22267, CVE-2024-22268, CVE-2024-22269, and CVE-2024-22270, expose users to a range of threats
a critical vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform, tracked as CVE-2024-33006, with a CVSS score of 9.6
This critical security flaw cataloged as CVE-2023-46012 (CVSS 9.8), poses a significant risk to users of the affected routers
Cacti has recently released a crucial security update to address two significant vulnerabilities (CVE-2024-29895 & CVE-2024-30268)
This particular scheme involves the misuse of GoTo Meeting, a popular online meeting platform, to deploy the notorious Remcos Remote Access Trojan
The vulnerability, identified as CVE-2024-4761, is an “Out of bounds write” flaw found in V8, Chrome’s JavaScript engine
Forensic investigations by Rapid7 have linked these activities to the Black Basta ransomware group, known for its disruptive cyber attacks
The vulnerability, CVE-2024-35205, arises from the application's failure to properly sanitize filenames before processing them
The malicious package, disguised as a fork of the widely used "requests" library, contained a hidden Go binary embedded within a PNG image
PowerDNS, a widely used open-source DNS software provider, has issued a security advisory regarding a vulnerability (CVE-2024-25581)
Among the most alarming vulnerabilities addressed in this update is CVE-2024-25641, with a CVSS score of 9.1.
These scams go beyond the typical emotional manipulation seen in traditional romance scams, incorporating elaborate schemes involving fake cryptocurrency exchanges
the update also fixes two other 'High' severity flaws and a unique 'Low' severity vulnerability specific to Microsoft Edge (CVE-2024-30055
Dor Segal has revealed a critical vulnerability in FIDO2, the popular passwordless authentication standard
NHS England Digital has issued a critical alert concerning vulnerabilities in Arcserve’s Unified Data Protection (UDP) software
CRIL published a detailed analysis of a newly identified ransomware variant named Trinity, highlighting its potential links to Venus ransomware
A serious vulnerability (CVE-2024-32113) has been uncovered in Apache OFBiz, a popular suite of enterprise software tools