Share

RSS

More Articles…

• What is phishing? Understanding and identifying social engineering attacks
• Avoid Ransomware: That’s why it’s best not to take any risks
• Double extortion ransomware: What they are and how to defend yourself
• Zero-Day attack: what they are and how to defend yourself with SOCaaS
• Monitoring system, an overview
• Data Exfiltration: defense against data theft
• Install a Let’s Encrypt certificate on Debian based machine
• WastedLocker: Next generation ransomware

Categories …

• Backup as a Service (2)
  • Acronis Cloud Backup (10)
  • Veeam Cloud Connect (4)
• Cloud Conference (3)
• Cloud CRM (1)
• Cloud Server/VPS (20)
• Conferenza Cloud (4)
• ICT Monitoring (4)
• Log Management (2)
• News (16)
• ownCloud (4)
• Privacy (6)
• Secure Online Desktop (14)
• Security (6)
  • Ethical Phishing (1)
  • SOCaaS (10)
    • SIEM (3)
    • UEBA (3)
  • Vulnerabilities (83)
• Web Hosting (12)

Tags

Dark Reading:

• Emotet Takedown: Short-Term Celebration, Long-Term Concerns February 8, 2021
  Security researchers examine how and when Emotet's operators may resurface, and the threats that could evolve in the meantime.
• Malicious Code Injected via Google Chrome Extension Highlights App Risks February 8, 2021
  An open source plug-in purportedly introduced tracking and malicious download code to infect nearly 2 million users, reports say.
• Hacker Raised Chemical Settings at Water Treatment Plant to Dangerous Levels February 8, 2021
  Remote access interface breached at Florida utility; attacker detected raising level of sodium hydroxide in water.
• What's the Difference Between 'Observability' and 'Visibility' in Security? February 8, 2021
  To drive holistic security success, we have to start with the interlinking of visibility and observability.
• Android App Infects Millions of Devices With a Single Update February 8, 2021
  The popular Barcode Scanner app, which as been available on Google Play for years, turned malicious with one software update.
• Hidden Dangers of Microsoft 365's Power Automate and eDiscovery Tools February 8, 2021
  Attackers are using legitimate enterprise tools to execute attacks and carry out malicious actions. Security teams must take action now.
• Spotify Hit With Another Credential-Stuffing Attack February 5, 2021
  This marks the second credential-stuffing attack to hit the streaming platform in the last few months.
• Security Researchers Push for 'Bug Bounty Program of Last Resort' February 5, 2021
  An international program that pays out hefty sums for the discovery of software vulnerabilities could spur greater scrutiny of applications and lead to better security.
• Pro Tip: Don't Doubt Yourself February 5, 2021
  The Edge asked seasoned security pros what they wish they had known when they first got into the field.
• Cybercrime Goes Mainstream February 5, 2021
  Organized cybercrime is global in scale and the second-greatest risk over the next decade.

Full Disclosure

• Trojan-Spy.Win32.WebCenter.a / Information Disclosure February 8, 2021
  Posted by malvuln on Feb 07Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/e3cf225a94c6be5a26fc21a1ec83f418.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan-Spy.Win32.WebCenter.a Vulnerability: Information Disclosure Description: The trojan creates a dir named "webcenter" under "C:\Windows\SysWOW64" and drops various exes and html pages to return information about the...
• Trojan-Spy.Win32.SpyEyes.awow / Insecure Permissions EoP February 7, 2021
  Posted by malvuln on Feb 07Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/e61a6755db1c59eb1d219b761de925f4.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan-Spy.Win32.SpyEyes.awow Vulnerability: Insecure Permissions EoP Description: SpyEyes.awow creates a insecure dir named "$Recycle$" under the c:\ drive, granting change (C) permissions to the authenticated users group. Also, drops...
• Trojan.Win32.Delf.uq / Insecure Permissions EoP February 7, 2021
  Posted by malvuln on Feb 07Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/a4ea99b54e171274795f14a4ac7f17ba.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan.Win32.Delf.uq Vulnerability: Insecure Permissions EoP Description: Malware creates an vulnerable dir named "downsoft" under c:\ drive granting change (C) permissions to the authenticated users group. Type: PE32 MD5:...
• Email-Worm.Win32.Sircam.eb / Insecure Permissions EoP February 7, 2021
  Posted by malvuln on Feb 07Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/cd88a9b686acd9ccf23dba8d248129b4.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Email-Worm.Win32.Sircam.eb Vulnerability: Insecure Permissions EoP Description: Sircam.eb creates a vuln dir under c:\ drive named "Windupdt" and drops an exe named "winupdate.exe". Grants change (C) permissions to...
• Trojan.Win32.Cospet.abg / Insecure Permissions EoP February 7, 2021
  Posted by malvuln on Feb 07Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/5f5b308853b9aa9243390c135ff6ba1b.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan.Win32.Cospet.abg Vulnerability: Insecure Permissions EoP Description: Cospet.abg, creates an vulnerable dir named "dir" under c:\ drive granting change (C) permissions to the authenticated users group. Sends SYN packet to TCP port...
• Trojan.Win32.Comei.pgo / Insecure Permissions EoP February 7, 2021
  Posted by malvuln on Feb 07Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/7cb253cf47b6de8adfea559e51950c17.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan.Win32.Comei.pgo Vulnerability: Insecure Permissions EoP Description: Trojan malware creates an vulnerable dir named "dir" under c:\ drive granting change (C) permissions to the authenticated users group. Type: PE32 MD5:...
• Trojan-Spy.Win32.SpyEyes.auwl / Insecure Permissions EoP February 7, 2021
  Posted by malvuln on Feb 07Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/0115ba22a0d009a13d0748027dd62e2a.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan-Spy.Win32.SpyEyes.auwl Vulnerability: Insecure Permissions EoP Description: SpyEyes creates a vuln dir named "cleansweep.exe" under c:\ drive and drops an exe inside also named "cleansweep.exe". The vulnerable trojan...
• Trojan-Spy.Win32.SpyEyes.auqj / Insecure Permissions EoP February 7, 2021
  Posted by malvuln on Feb 07Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/ea6ed38ab5264cd92f0d42eb020e87d8.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan-Spy.Win32.SpyEyes.auqj Vulnerability: Insecure Permissions EoP Description: SpyEyes.auqj creates a hidden vuln dir named "wedfsadeex.exe" under c:\ drive, granting change (C) permissions to the authenticated users group. Type:...
• Trojan.Win32.Gentee.h / Insecure Permissions EoP February 7, 2021
  Posted by malvuln on Feb 07Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/2bd5672432a545db03db0e09c120d42e.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan.Win32.Gentee.h Vulnerability: Insecure Permissions EoP Description: Trojan Gentee.h creates a vuln dir named "Paltalk" under c:\ drive, granting change (C) permissions to the authenticated users group. Type: PE32 MD5:...
• Trojan.Win32.Gentee.b / Insecure Permissions EoP February 7, 2021
  Posted by malvuln on Feb 07Discovery / credits: Malvuln - malvuln.com (c) 2021 Original source: https://malvuln.com/advisory/86e63bb63f3baf48ad3bf24c3f5b7e40.txt Contact: malvuln13 () gmail com Media: twitter.com/malvuln Threat: Trojan.Win32.Gentee.b Vulnerability: Insecure Permissions EoP Description: Trojan creates a vuln dir under c:\ drive named "WINNT", granting change (C) permissions to the authenticated user group. Type: PE32 MD5:...