All posts in Uncategorized

■■■■■ UAC bypass tactics research ends off with combining the use of trusted directories using trailing spaces “c:\windows \system32\” and a shellcode injector utilizing process fibers, inevitably resulting in a C2 channel with high integrity. What’s interesting about these trending UAC bypasses our CTI engine has been articulating is that MS doesn’t seem to consider…

■■□□□ Osiris Trojan targeting #Germany . https://blog.morphisec.com/long-live-osiris-banking-trojan-targets-german-ip-addresses https://t.me/cKure/6820

■■■■■ Cheatsheet: XSS that works in 2021 https://netsec.expert/posts/xss-in-2021/ https://t.me/cKure/6819

■□□□□ A Swiss Company Says It Found Weakness That Imperils Encryption. https://www.bloomberg.com/amp/news/articles/2021-02-07/a-swiss-company-says-it-found-weakness-that-imperils-encryption https://t.me/cKure/6818

■□□□□ Abusing JWT public keys without the public key. https://blog.silentsignal.eu/2021/02/08/abusing-jwt-public-keys-without-the-public-key/ https://t.me/cKure/6817

■■■■■ #DataLeak: COMB breach: 3.2B email and password pairs leaked online. https://hackademicus.nl/comb-breach-3-2b-email-and-password-pairs-leaked-online/ https://t.me/cKure/6814

■■■□□ New phishing attack uses Morse code to hide malicious URLs. https://www.bleepingcomputer.com/news/security/new-phishing-attack-uses-morse-code-to-hide-malicious-urls/ https://t.me/cKure/6813

■■■■■ #CyberAttack on #SriLanka : Hacktivists deface multiple Sri Lankan domains, including Google.lk. https://www.zdnet.com/article/hacktivists-deface-multiple-sri-lankan-domains-including-google-lk/ https://t.me/cKure/6812

■□□□□ Serco Affirms Babuk Ransomware Attack. https://www.ehackingnews.com/2021/02/serco-affirms-babuk-ransomware-attack.html https://t.me/cKure/6811

■□□□□ WARNING — Hugely Popular ‘The Great Suspender’ Chrome Extension Contains Malware. https://thehackernews.com/2021/02/warning-hugely-popular-great-suspender.html https://t.me/cKure/6810