Do Son Dubbed "BIPClip", this campaign employed seven distinct malicious packages, released in 19 different versions since December 2022
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
CVE-2024-22039 could allow an unauthenticated remote attacker to execute code on the underlying operating system with root privileges.
One of the most concerning discoveries in this campaign is the deployment of a new Java-based RAT named VCURMS.
CVE-2024-22144 with a "Critical" CVSS score of 9.0, could allow unauthenticated attackers to take complete control of vulnerable websites
CVE-2024-25331 leaves the door wide open for unauthenticated attackers to take full control of affected routers
CVE-2024-22127 (CVSS 9.1), this time discovered in SAP NetWeaver AS Java's Administrator Log Viewer plug-in
Identified as CVE-2024-2194 with a CVSS score of 7.2, this vulnerability is classified as a stored cross-site scripting (XSS) issue
PoC exploit code will be released at "a later date "for a high-severity CVE-2024-21378 flaw allowing RCE in Microsoft Outlook
Security researchers have exposed a crafty attack campaign manipulating a decentralized content delivery network (CDN)
Attackers are tricking users into downloading a dangerous infostealer disguised as a legitimate Adobe Reader installation file
A flaw (CVE-2024-2370, CVSS 9.8) has been discovered in older versions of ManageEngine Desktop Central, developed by Zoho Corporation
A dangerous new malware named Planet Stealer is making its rounds in the cybercriminal underworld, and security experts warn
In an era where digital transactions are commonplace, the threat of financial malware has surged, posing significant...
Security researchers at GuidePoint have uncovered a new weapon in the BianLian ransomware gang’s arsenal – a...
The vulnerability, designated as CVE-2024-22252, could potentially allow attackers to execute malicious code on affected systems.
CVE-2024-22857 is a heap-based buffer overflow that could allow attackers to remotely execute arbitrary code on systems
The payload delivered through this elaborate ruse is a Lua JIT malware, comprising a compiled LuaJIT executable and a batch script
Security researchers at QiAnXin Threat Intelligence Center have uncovered a sophisticated malware campaign waged by the Kimsuky APT group
ASEC have uncovered a disturbing malware campaign that's cleverly disguised as a legitimate installer for the popular Notion software
CVE-2023-41313 allows attackers to exploit weaknesses in the authentication process within Apache Doris using a timing attack
One such group, known as UAC-0050 or "The DaVinci Group," has emerged as a key player in the ongoing conflict between Russia and Ukraine
The company's investigation revealed three previously unknown vulnerabilities in popular tools used for font processing and manipulation