All posts tagged hack

■■□□□ Raven – Advanced Cyber Threat Map (Simplified, customizable and responsive. It uses D3.js with TOPO JSON, has 247 countries, ~100,000 cities, and can be used in an isolated environment without external lookups!. https://github.com/qeeqbox/raven https://t.me/cKure/10544

■■■□□ Two of the arrested REvil members have been identified by Russian media. Both Roman Muromsky and Andrei Bessonov are detained under the Tverskoy Court of Moscow. An unknown individual recorded one of the alleged members on WhatsApp and shared it with RBC, a Russian Media group. Source: vxunderground. https://t.me/cKure/10542

● Intel has removed support for SGX (software guard extension) in 12th Generation Intel Core 11000 and 12000 processors, rendering modern PCs unable to playback Blu-ray disks in 4K resolution. https://t.me/cKure/10541

■■■■■ Cyber-Attack on Ukraine amid Kiev blaming Russia for the cyber onslaught. https://www.bbc.com/news/world-europe-59992531 https://t.me/cKure/10540

■■■■□ 15 members of REvil have been arrested by the Russian authorities. REvil, once dubbed the “Crown prince of Ransomware”, was responsible for the Kaseya supply chain attack, and many other high-profile breaches. https://t.me/cKure/10537

■■■■■ Bypass EDR with MSTeams (Microsoft). Copy payload into: %userprofile%\AppData\Local\Microsoft\Teams\current\ Then: %userprofile%\AppData\Local\Microsoft\Teams\Update.exe –processStart payload.exe –process-start-args “args” Download and execute binary with user. Source: https://t.co/q7Mhu3GQCr https://t.me/cKure/10535

■■■□□ Data-Leak from Poland as Polish military suffers a breach of 1.8 million data points of military equipment. The disclosed catalog “does not pose a threat to state security” and was not obtained by breaching ICT systems, according to the Polish Armed Forces. https://www.gov.pl/web/obrona-narodowa/publikacja-danych-nie-jest-zagrozeniem-dla-bezpieczenstwa-panstwa-ani-funkcjonowania-sil-zbrojnych-rp https://t.me/cKure/10534

■□□□□ A weakness in the Microsoft Defender antivirus can allow attackers to retrieve information to use to avoid detection. https://securityaffairs.co/wordpress/126689/hacking/microsoft-defender-weakness.html https://t.me/cKure/10533

■■■■■ CVE-2021-43297: APACHE Dubbo Remote Code Execution Vulnerability Alert https://lists.apache.org/thread/1mszxrvp90y01xob56yp002939c7hlww https://securityonline.info/cve-2021-43297-apache-dubbo-remote-code-execution-vulnerability/ https://t.me/cKure/10532

■□□□□ OSINT utility: Alt-Tech Social Search This tool is a Google custom-search engine which searches across prominent alt-tech (non-mainstream) social media platforms including Parler, Gab, Minds, BitChute, DLive.tv, Rumble – and also several board/paste sites such as JustPaste.it, WrongThink.net & 8kun https://www.osintcombine.com/alt-tech-social-search https://t.me/cKure/10531