Updated GravityRAT Malware Adds Advanced AV Detection

Researchers tracking the evolution of the remote access trojan GravityRAT warn that developers behind the malware have made key changes to the RAT’s code in an attempt to decrease antivirus detection. “We’ve seen file exfiltration, remote command execution capability and anti-vm techniques added...

av-solutions.at XSS vulnerability

Open Bug Bounty ID: OBB-603046 Description| Value ---|--- Affected Website:| av-solutions.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Independent lab tests again prove the excellence of Trend Micro Mobile Security for Android

Submitted by Ian Grutze For the fourth year in a row, as shown in AV Comparatives’ Anti-Virus Comparative Android Test 2018 - January 2018, Trend Micro Mobile Security for Android shows it provides 100% protection against malware. In this independent lab test, more than 200 mobile security produc...

March 13, 2018—KB4088787 (OS Build 14393.2125 and 14393.2126)

None None...

March 13, 2018—KB4088786 (OS Build 10240.17797)

None None...

March 13, 2018—KB4088779 (OS Build 10586.1478)

None None...

March 13, 2018—KB4088776 (OS Build 16299.309)

None None...

March 13, 2018—KB4088782 (OS Build 15063.966 and 15063.968)

None None...

av-online.hu XSS vulnerability

Open Bug Bounty ID: OBB-581533 Description| Value ---|--- Affected Website:| av-online.hu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

GPAC MP4Box Stack Buffer Overflow Vulnerability

GPAC MP4Box is an open source project GPAC provided in the multimedia wrapper . GPAC MP4Box commit 90dc7f853d31b0a4e9441cba97feccf36d8b69a4 Previous versions of the src/mediatools/avparsers.c file of https://github.com/gpac/gpac/blob/...

GPAC Buffer Overflow Vulnerability

GPAC is a set of open source multimedia framework. A buffer overflow vulnerability exists in the 'gfmediaavcreadsps' function in the mediatools/avparsers.c file in GPAC 0.7.1 and earlier versions. An attacker can exploit this vulnerability to overwrite blocks of memory in the glibc heap...

Behavior monitoring combined with machine learning spoils a massive Dofoil coin mining campaign

Update: Further analysis of this campaign points to a poisoned update for a peer-to-peer P2P application. For more information, read Poisoned peer-to-peer app kicked off Dofoil coin miner outbreak. Just before noon on March 6 PST, Windows Defender Antivirus blocked more than 80,000 instances of...

av-online.co.za XSS vulnerability

Open Bug Bounty ID: OBB-570453 Description| Value ---|--- Affected Website:| av-online.co.za Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Year-Old Coldroot RAT Targets MacOS, Still Evades Detection

Researchers are warning users about the Coldroot remote access Trojan that is going undetected by AV engines and targets MacOS computers. The RAT is cross-platform and capable of planting a keylogger on MacOS systems prior to the OS High Sierra and is designed to steal banking credentials. Coldro...

How artificial intelligence stopped an Emotet outbreak

At 12:46 a.m. local time on February 3, a Windows 7 Pro customer in North Carolina became the first would-be victim of a new malware attack campaign for Trojan:Win32/Emotet. In the next 30 minutes, the campaign tried to attack over a thousand potential victims, all of whom were instantly and...

How artificial intelligence stopped an Emotet outbreak

At 12:46 a.m. local time on February 3, a Windows 7 Pro customer in North Carolina became the first would-be victim of a new malware attack campaign for Trojan:Win32/Emotet. In the next 30 minutes, the campaign tried to attack over a thousand potential victims, all of whom were instantly and...

av-iq.com XSS vulnerability

Open Bug Bounty ID: OBB-556348 Description| Value ---|--- Affected Website:| av-iq.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Gojdue Variant Eludes Microsoft, Google Cloud Protection, Researchers Say

Researchers have identified a new ransomware strain that went undetected by built-in anti-malware protection used by cloud heavyweights Microsoft and Google as recently as January. According to researchers at the cloud service firm Bitglass, both Google Drive and Microsoft Office 365’s SharePoint...

av-iq.eu XSS vulnerability

Open Bug Bounty ID: OBB-554621 Description| Value ---|--- Affected Website:| av-iq.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Meltdown / Spectre: New Concerns Over Intel Patches, as Hackers Test Exploits

This week brought new developments in the Meltdown / Spectre saga, including more concerns about Intel’s buggy patches, and mounting evidence that hackers are trying to create exploits for the vulnerabilities. It seemed that after weeks of complaints and confusion, Intel’s issue had hit bottom an...