All posts by cK-bot

■■□□□ Data-Leak: Men’s social networking website and online dating application Manhunt has suffered a data breach.  According to a security notice filed with the office of the Washington attorney general on April 1, the 20-year-old site was compromised in a cyber-attack that took place in February 2021. https://www.documentcloud.org/documents/20615089-mhnextllc2021-04-01 https://t.me/cKure/7689

■■■■□ Zero-Day Exploits in SonicWall Email Security Lead to Enterprise Compromise. http://www.fireeye.com/blog/threat-research/2021/04/zero-day-exploits-in-sonicwall-email-security-lead-to-compromise.html CVE-2021-20021 CVSS: 9.4 Unauthorized administrative account creation CVE-2021-20022 CVSS: 6.7 Post-authentication arbitrary file upload CVE-2021-20023 CVSS: 6.7 Post-authentication arbitrary file read https://t.me/cKure/7688

■■■□□ BetterXencrypt – A Better Version Of Xencrypt – Xencrypt It Self Is A Powershell Runtime Crypter Designed To Evade AVs. https://github.com/GetRektBoy724/BetterXencrypt https://t.me/cKure/7687

■■■■■ Hacker (Unkn0wX) hacks a live website and posts his name in a text file as proof. Asks hackers / pentesters to try to hack as he did. PoC for hack: http://www.supply.su.ac.th/notice/log.txt The website hacked belongs to Silpakorn University, Thailand 🇹🇭: https://wikipedia.org/wiki/Silpakorn_University https://t.me/cKure/7684

■□□□□ Attackers Test Weak Passwords in Purple Fox Malware Attacks. https://t.me/cKure/7683

■□□□□ Over 750,000 Users Downloaded New Billing Fraud Apps From Google Play Store. https://thehackernews.com/2021/04/over-750000-users-download-new-billing.html https://t.me/cKure/7682

■□□□□ School District’s Files Leaked in $40m Ransomware Attack. https://www.infosecurity-magazine.com:443/news/broward-files-leaked-ransomware/ https://t.me/cKure/7681

■■□□□ WhatsApp pink malware demo: https://www.instagram.com/reel/CN2tPWGAcrT/?igshid=u85vi5kfhp9n https://t.me/cKure/7680

■■■□□ Pulse Secure VPN zero-day used to hack defense firms, govt organisations. https://www.bleepingcomputer.com/news/security/pulse-secure-vpn-zero-day-used-to-hack-defense-firms-govt-orgs/ https://t.me/cKure/7678

■□□□□ Internal Facebook email reveals intent to frame data scraping as ‘normalized, broad industry issue’. https://www.zdnet.com/article/facebook-internal-email-reveals-intent-to-frame-data-scraping-as-broad-industry-issue-and-normalized https://t.me/cKure/7677