All posts in Uncategorized

■■■■□ Android spyware ‘Mandrake’ hidden in apps on Google Play since 2022. https://www.bleepingcomputer.com/news/security/android-spyware-mandrake-hidden-in-apps-on-google-play-since-2022/ https://t.me/cKure/14485

■■■■■ RedGuard – Excellent C2 Front Flow Control tool (can avoid Blue Teams, AVs, EDRs check). https://github.com/wikiZ/RedGuard https://t.me/cKure/14483

■■■■■ Air-Gap bypass using AI. AI can snoop on your computer screen using signals leaking from HDMI cables — researchers develop new AI model that enables using antennas for long-range attacks. https://www.tomshardware.com/tech-industry/cyber-security/ai-can-snoop-on-your-computer-screen-using-signals-leaking-from-hdmi-cables https://t.me/cKure/14482

■■□□□ Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails. https://thehackernews.com/2024/07/proofpoint-email-routing-flaw-exploited.html https://t.me/cKure/14481

■■■■□ Outlook CVE-2024-21413 for RCE. Hacking through a letter. https://blog.injectexp.dev/outlook-cve-2024-21413-for-rce-hacking-through-a-letter/07/rce/ https://t.me/cKure/14480

■■■□□ Dumping Cookies with Chromium’s Remote Debugger Port. https://posts.specterops.io/hands-in-the-cookie-jar-dumping-cookies-with-chromiums-remote-debugger-port-34c4f468844e https://t.me/cKure/14479

■■□□□ Telegram Zero-Day: https://www.forbes.com/sites/zakdoffman/2024/07/23/new-telegram-attack-warning-samsung-google-android-users-targeted/ https://t.me/cKure/14478

■■■■□ Find and execute WinAPI functions with Assembly (Shellcode x64). https://print3m.github.io/blog/x64-winapi-shellcoding https://t.me/cKure/14477

■■■■□ Real Intelligence Threat Analytics (RITA) is a framework for detecting command and control communication through network traffic analysis. https://github.com/activecm/rita https://t.me/cKure/14476

■■■■□ APT45: North Korea’s Digital Military Machine. https://cloud.google.com/blog/topics/threat-intelligence/apt45-north-korea-digital-military-machine/ https://t.me/cKure/14474