All posts by cK-bot

■■■□□ Cyber-Attack by China as the APT group deliver new MysterySnail RAT malware to Windows servers. https://threatpost.com/windows-zero-day-exploited-espionage/175432/ https://t.me/cKure/9742

■■□□□ A fraudster calls a legitimate functionality as RCE in Apple phone. The profile of this person can be found here: https://twitter.com/jonathandata1 https://github.com/jonathandata1/ios_15_rce https://t.me/cKure/9741

■■■■□ Data-Leak from United States military wrt nuclear submarines and warships as couple get arrested over sale of nuclear secrets to foreign power. https://www.infosecurity-magazine.com/news/couple-arrested-over-sale-of/ https://t.me/cKure/9740

■■■■■ Apple Releases Urgent iPhone and iPad Updates to Patch New Zero-Day Vulnerability. CVE-2021-30883 https://support.apple.com/en-us/HT212846 https://thehackernews.com/2021/10/apple-releases-urgent-iphone-and-ipad.html https://t.me/cKure/9739

■■■■□ A new study by a team of university researchers in the United Kingdom has unveiled a host of privacy issues that arise from using Android smartphones. https://www.bleepingcomputer.com/news/security/study-reveals-android-phones-constantly-snoop-on-their-users/ https://t.me/cKure/9738

■■■□□ Privacy Concerns with Sobeys Inc. “Caper Carts” System. https://citizenlab.ca/2021/10/clean-up-in-the-digital-aisle-privacy-concerns-with-sobeys-inc-caper-carts-system/ https://t.me/cKure/9737

■■□□□ United States : Woman allegedly hacked a flight school where she used to work at, clearing planes with maintenance issues to fly. “It was a situation that could have endangered human life,” CEO of traning school company told police. https://www.vice.com/amp/en/article/bvzwv5/woman-allegedly-hacked-flight-school-cleared-planes-with-maintenance-issues-to-fly https://t.me/cKure/9736

■■■■□ Iran : State sponsored Cyber-Attack as Iran-linked DEV-0343 targeting defense, GIS, and maritime sectors https://www.microsoft.com/security/blog/2021/10/11/iran-linked-dev-0343-targeting-defense-gis-and-maritime-sectors/ https://t.me/cKure/9735

■■■□□ Interesting thread: checkPoint research: [CyberCrime Updates] After being allegedly dead, #phorpiex is back with a new “Twizt” module that makes it a peer-to-peer botnet. Including a crypto-clipper for 36 wallets, uses a binary protocol with RC4 and RSA over 48755 port, and port mapping on home router using UPnP. https://twitter.com/_CPResearch_/status/1447852018794643457 https://t.me/cKure/9734

■■■□□ LPE exploit https://github.com/rjt-gupta/CVE-2021-29337 https://t.me/cKure/9733