All posts by cK-bot

■□□□□ United States : CIA Officials Under Trump Discussed Assassinating Julian Assange. https://t.me/cKure/9551

■□□□□ https://github.com/donky16/CVE-2021-40346-POC https://t.me/cKure/9550

■□□□□ Blockhead admits to helping North Korea mine crypto-bucks, faces 20 years jail. https://go.theregister.com/feed/www.theregister.com/2021/09/28/blockhead_admits_to_helping_north/ https://t.me/cKure/9549

■■■■■ EXOCET – AV-evading, undetectable, payload delivery tool. https://github.com/tanc7/EXOCET-AV-Evasion https://t.me/cKure/9548

■■■□□ Exploiting Client-Side Prototype Pollution in the wild. https://blog.s1r1us.ninja/research/PP https://t.me/cKure/9547

■■■□□ FoggyWeb: Targeted NOBELIUM malware leads to persistent backdoor. https://www.microsoft.com/security/blog/2021/09/27/foggyweb-targeted-nobelium-malware-leads-to-persistent-backdoor/ https://t.me/cKure/9546

■■■■□ Interesting thread on NTFS streams in Windows OS. Writing an EXE into any file’s NTFS stream, and run it as a process. We can delete the file, even the process is still running. https://t.co/175lfl2shu https://t.me/cKure/9545

■■■■■ Apple ‘Still Investigating’ Unpatched and Public iPhone Vulnerabilities. https://www.vice.com/amp/en/article/g5gan4/apple-still-investigating-unpatched-and-public-iphone-vulnerabilities https://t.me/cKure/9544

■■■□□ Kaspersky researchers have discovered an advanced Trojan, dubbed BloodyStealer, sold on darknet forums and used to steal gamers’ accounts on popular gaming platforms, including Steam, Epic Games Store, and EA Origin. https://t.me/cKure/9543

■■□□□ Privacy: In iOS 15, the phone is findable even when “Powered off”. https://t.co/gfi4WJfula https://t.me/cKure/9541