All posts tagged hack

■■■□□ Cyber-Crime | Trickbot arrest: Russian national (Vladimir Dunaev) extradited to US for alleged role in developing notorious banking trojan. Vladimir made his first appearance in federal court this week. https://portswigger.net/daily-swig/trickbot-arrest-russian-national-extradited-to-us-for-alleged-role-in-developing-notorious-banking-trojan https://t.me/cKure/9873

■■■■■ Zero-Day: Two in-the-wild 0-days patched by Chrome: CVE-2021-38000 and CVE-2021-38003. Both discovered by Google TAG! https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html https://t.me/cKure/9872

■■■□□ From Service Account to SYSTEM. https://decoder.cloud/2019/12/06/we-thought-they-were-potatoes-but-they-were-beans/ https://t.me/cKure/9870

■■■■□ GitLab CE CVE-2021-22205 in the wild. https://security.humanativaspa.it/gitlab-ce-cve-2021-22205-in-the-wild/ https://t.me/cKure/9869

■■■■■ PS-1 Toolkit: This is a set of PowerShell scripts that are used by many penetration testers released by multiple leading professionals. A collection of scripts that are prepared and obfuscated to reduce level of detectability and to slow down incident response from understanding the actions performed by an attacker. https://github.com/vysecurity/ps1-toolkit https://t.me/cKure/9868

■■■■■ This is an old article from 1999. Archives: Hotmail Hackers: ‘We Did It’; as a hacking group claims responsibility for publicizing the Hotmail security hole, which Microsoft says is most decidedly not a ‘backdoor.’ By James Glave. https://www.google.com/amp/s/www.wired.com/1999/08/hotmail-hackers-we-did-it/amp https://t.me/cKure/9867

■■■■□ Wslink: Unique and undocumented malicious loader that runs as a server. https://www.welivesecurity.com/2021/10/27/wslink-unique-undocumented-malicious-loader-runs-server/ https://t.me/cKure/9866

Data-Leak of ~20K personnel of Israel defence forces (regular army) leaked by a Cyber-Crime group called Moses-Staff including names, ID, phone number, personal photographs, address and similar. Refer: https://t.me/cKure/9860 https://t.me/cKure/9865

■■■■■ Data-Leak from Israel as unknown entity posted employee PII of Israeli military unit(s) on multiple parts in last few days. We have received full copies of data of a few hundred MBs. https://t.me/cKure/9860

■■■■■ Binocle, a graphical tool to visualize binary data. It colorizes bytes according to different rules and renders them as pixels in a rectangular grid. This allows users to identify interesting parts in large files and to reveal image-like regions. https://github.com/sharkdp/binocle https://t.me/cKure/9859