All posts by cK-bot

■□□□□ Signal Messaging app goes down amid hosting outage. In their message, they mentioned, “Hold tight, folks! Signal is currently down, due to a hosting outage affecting parts of our service. We’re working on bringing it back up.” https://twitter.com/signalapp/status/1442354759009247232 https://t.me/cKure/9540

■■■□□ Pure C++, weaponized, fully automated implementation of RottenPotatoNG. https://github.com/klezVirus/CandyPotato https://t.me/cKure/9539

■■■■■ Tool: CopyCat, a simple rapper for Mimikatz, bypass Defender. https://github.com/mobdk/CopyCat https://t.me/cKure/9538

■■□□□ Interesting thread on Nighthawk C2. https://twitter.com/mariuszbit/status/1442139157774487555 https://t.me/cKure/9537

■■■□□ Data-Leak: A suspicious hotel guest. Yet another APT group that exploited the ProxyLogon vulnerability in March 2021. https://www.welivesecurity.com/2021/09/23/famoussparrow-suspicious-hotel-guest/ https://t.me/cKure/9536

■■■■■ RCE in Citrix ShareFile Storage Zones Controller (CVE-2021-22941) – A Walk-Through. https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html?m=1 https://t.me/cKure/9535

■■□□□ TangleBot: New Advanced SMS Malware Targets Mobile Users Across U.S. and Canada with COVID-19 Lures. https://www.cloudmark.com/en/blog/mobile/tanglebot-new-advanced-sms-malware-targets-mobile-users-across-us-and-canada-covid-19 https://t.me/cKure/9534

■□□□□ Unconfirmed Data-Leak from Malaysia as actor claims to have data pertaining to Armed Forces of the nation. Records include:(vt_mykad,vt_tenterano,vt_fullname,vt_mobile,vt_email,vt_password,vt_penerima_mykad,vt_penerima_name,vt_user_code,vt_usr_id) The database contains some interesting data such as name, mobile phone, citizenship id, military number and more. https://t.me/cKure/9533

■■■■□ zuthaka: collaborative free open-source Command & Control integration framework. https://securityonline.info/zuthaka-collaborative-free-open-source-command-control-integration-framework/ https://t.me/cKure/9532

■■■■□ $5000 Google IDOR Vulnerability Writeup. https://asterfiester.medium.com/5000-google-idor-vulnerability-writeup-c7b45926abe9 https://t.me/cKure/9531