All posts tagged cyber

■■■□□ China : ShadowPad, an infamous Windows backdoor that allows attackers to download further malicious modules or steal data, has been put to use by five different Chinese threat clusters since 2017. “The adoption of ShadowPad significantly reduces the costs of development and maintenance for threat actors,” SentinelOne researchers Yi-Jhen Hsieh and Joey Chen said. https://t.me/cKure/8944

■□□□□ Japanese cryptocoin exchange robbed of $100,000,000. https://t.me/cKure/8943

■■■□□ Data-Leak: The T-Mobile data breach keeps getting worse as an update to their investigation now reveals that cyberattack exposed over 54 million individuals’ data. https://www.bleepingcomputer.com/news/security/t-mobile-data-breach-just-got-worse-now-at-54-million-customers/ https://t.me/cKure/8942

■■□□□ Cloudflare mitigated one of the largest DDoS attack involving 17.2 million RPS. https://thehackernews.com/2021/08/cloudflare-mitigated-one-of-largest.html https://t.me/cKure/8941

■■■□□ Nigeria : A Nigerian threat actor has been observed attempting to recruit employees by offering them to pay $1 million in bitcoins to deploy Black Kingdom ransomware on companies’ networks as part of an insider threat scheme. https://thehackernews.com/2021/08/cybercrime-group-asking-insiders-for.html https://t.me/cKure/8940

■□□□□ IS Supporter Devises Strategy for Media Distribution Using Telegram Clone. https://ent.siteintelgroup.com/Technology-Terrorism/is-supporter-devises-strategy-for-media-distribution-using-telegram-clone.html https://t.me/cKure/8939

■■■□□ At least 60% of ATM machines in India run on Windows XP and in some cases are not patched to MS17-010 Eternal Blue exploit. https://idstch.com/geopolitics/becoming-prime-target-cyber-attacks-cyber-warfare-campaigns-india-enhancing-cyber-security-requires-many-measures/ https://t.me/cKure/8938

■■□□□ Interesting thread. https://twitter.com/therceman/status/1428460546660175875 https://t.me/cKure/8937

■■□□□ Stored XSS to RCE Chain as SYSTEM in ManageEngine ServiceDesk Plus. https://medium.com/tenable-techblog/stored-xss-to-rce-chain-as-system-in-manageengine-servicedesk-plus-493c10f3e444 https://t.me/cKure/8936

■■□□□ SourcePoint v1.2 releases: polymorphic C2 profile generator for Cobalt Strike C2s. https://github.com/Tylous/SourcePoint https://t.me/cKure/8935