All posts tagged cyber

■■■□□ Lazarus group uses fake cryptocurrency apps to plant AppleJeus malware. https://www.malwarebytes.com/blog/news/2022/12/lazarus-group-uses-fake-cryptocurrency-apps-to-plant-applejeus-malware https://t.me/cKure/12004

■□□□□ Data-Leak: Patient data from 2007 leaked from Tamil Nadu hospital in India https://www.livemint.com/news/india/patient-data-from-2007-leaked-from-tamil-nadu-hospital-report-11669998139562.html https://t.me/cKure/12003

■■■■□ New Zerobot malware has 21 exploits for BIG-IP, Zyxel, D-Link devices. https://www.bleepingcomputer.com/news/security/new-zerobot-malware-has-21-exploits-for-big-ip-zyxel-d-link-devices/ https://t.me/cKure/12002

■■□□□ scanner: ElectroNG is a security scanner for Electron apps, developed to be the professional enhanced version of a formerly open source tool maintened by Doyensec, Electronegativity. https://get-electrong.com/docs/#/introduction https://t.me/cKure/12001

{JS-ON: Security-OFF}: Abusing JSON-Based SQL to Bypass WAF. https://claroty.com/team82/research/js-on-security-off-abusing-json-based-sql-to-bypass-waf https://t.me/cKure/12000

■■■■■ Abused Slack service: Analysis of APT29’s attack activities against Italy 🇮🇹 https://ti-qianxin-com.translate.goog/blog/articles/analysis-of-apt29’s-attack-activities-against-italy/?_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en-US&_x_tr_pto=wapp https://t.me/cKure/11999

■■■■■ Zero-Day: Cisco discloses high-severity IP phone zero-day with exploit code: CVE-2022-20968, as the security flaw is tracked, is caused by insufficient input validation of received Cisco Discovery Protocol packets, which unauthenticated, adjacent attackers can exploit to trigger a stack overflow. https://www.bleepingcomputer.com/news/security/cisco-discloses-high-severity-ip-phone-zero-day-with-exploit-code/ https://t.me/cKure/11998

Pwn2own hacking competition Toronto 2022. S22 Samsung gets owned in 55 seconds. https://hothardware.com/news/hackers-slaughter-samsung-galaxy-s22-first-day-pwn2own-competition Day 3 of 4: https://youtu.be/VTQfb0Btt_Y https://t.me/cKure/11997

Pwn2own having competition Toronto 2022. S22 Samsung gets owned in 55 seconds. https://hothardware.com/news/hackers-slaughter-samsung-galaxy-s22-first-day-pwn2own-competition Day 3 of 4: https://youtu.be/VTQfb0Btt_Y https://t.me/cKure/11996

■■■■■ Mal-Hash.ps1 https://bakerstreetforensics.com/2022/12/06/mal-hash-ps1-v1-3-update/ https://t.me/cKure/11995