Alibaba OSS Buckets Compromised to Distribute Malicious Shell Scripts via Steganography

In this blog entry, we discuss a malicious campaign that targets Alibaba Cloud’s OSS buckets with leaked credentials for malware distribution and cryptojacking...

Fedora: Security Advisory for golang-github-aliyun-cli (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for golang-github-aliyun-ossutil (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: golang-github-aliyun-cli-3.0.104-4.s20220118git031f9f2.fc35

Alibaba Cloud Aliyun CLI...

[SECURITY] Fedora 35 Update: golang-github-aliyun-ossutil-1.7.9-3.fc35

Alibaba Cloud Aliyun Object Storage Service OSS CLI...

Fedora: Security Advisory for golang-github-aliyun-ossutil (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Alibaba nacos 授权问题漏洞

Alibaba nacos is a dynamic service discovery, configuration and service management platform for Alibaba in China. The software supports both DNS-based and RPC-based service discovery, and provides features such as providing real-time health checks to prevent services from sending requests to...

[SECURITY] Fedora 36 Update: golang-github-aliyun-ossutil-1.7.9-3.fc36

Alibaba Cloud Aliyun Object Storage Service OSS CLI...

Microsoft Warns of Cryptomining Malware Campaign Targeting Linux Servers

A cloud threat actor group tracked as 8220 has updated its malware toolset to breach Linux servers with the goal of installing crypto miners as part of a long-running campaign. "The updates include the deployment of new versions of a crypto miner and an IRC bot," Microsoft Security Intelligence...

Wiz extends CNAPP leadership with protection for Alibaba Cloud

Support for Alibaba Cloud follows just weeks after launch of Oracle Cloud Infrastructure OCI integration, providing organizations the broadest coverage of any cloud native application protection platform CNAPP...

Nextcloud: SSRF via potential filter bypass with too lax local domain checking

Summary: Hi. Reviewing the code for filtering for ssrf, in preventLocalAddress, we can see that it calls the function ThrowIfLocalAddress. It has three common checks, first, it checks if the string is localhost, or if it ends in .local or .localhost php // Disallow localhost and local network if...

com.alibaba.otter:manager.deployer (>=4.2.1 <=4.2.15), com.alibaba.otter:manager.web (>=4.2.1 <=4.2.15) +53 more potentially affected by CVE-2014-5326 via org.directwebremoting:dwr (>=2.0.rc2 <=2.0.11-RELEASE)

org.directwebremoting:dwr MAVEN version =2.0.rc2, =4.2.1, =4.2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1.1 and more Source cves: CVE-2014-5326 Source advisory: OSV:GHSA-Q5V2-2V66-6HWM...

com.alibaba.p3c.idea:p3c-common (=1.0.0), com.alibaba.p3c:p3c-pmd (>=1.0.0 <=1.3.6) +65 more potentially affected by CVE-2019-7722 via net.sourceforge.pmd:pmd-core (>=5.2.0 <=5.8.1)

net.sourceforge.pmd:pmd-core MAVEN version =5.2.0, =1.0.0, =0.1.0, =0.1.0, =2.14.1, =0.1.0, =1.7.2, =1.4.2, =1.0.0, =1.2.1, =1.2.1, =1.0.0, =1.0.1 and more Source cves: CVE-2019-7722 Source advisory: OSV:GHSA-57QJ-79GH-69W8...

Watch Out! Cryptocurrency Miners Targeting Dockers, AWS and Alibaba Cloud

LemonDuck, a cross-platform cryptocurrency mining botnet, is targeting Docker to mine cryptocurrency on Linux systems as part of an active malware campaign. "It runs an anonymous mining operation by the use of proxy pools, which hide the wallet addresses," CrowdStrike said in a new report. "It...

TeamTNT targeting AWS, Alibaba

By Darin Smith.TeamTNT is actively modifying its scripts after they were made public by security researchers.These scripts primarily target Amazon Web Services, but can also run in on-premise, container, or other forms of Linux instances.The group's payloads include credential stealers,... This i...

Alibaba Sentinel 代码问题漏洞

Alibaba Sentinel is a highly available open source flow control protection component for cloud-native microservices from Alibaba, China. A security vulnerability exists in Alibaba Sentinel version 1.8.2. An attacker can exploit this vulnerability to conduct server-side request forgery attacks...

cc.akkaha:asura-core_2.12 (=0.3.0), cc.akkaha:asura-dubbo_2.12 (>=0.2.0 <=0.6.0) +285 more potentially affected by CVE-2021-30179 via com.alibaba:dubbo (>=2.5.10 <=2.6.8)

com.alibaba:dubbo MAVEN version =2.5.10, =0.2.0, =0.1.5, =0.1.5, =11.0.1-RELEASE, =11.0.1-RELEASE, =1.0, =1.4.0, =1.4.0, =1.4.0, =1.0.0, =1.0.1 and more Source cves: CVE-2021-30179 Source advisory: OSV:GHSA-5MC7-M686-P6JG...

Cryptojacking Attacks Target Alibaba ECS Instances

Discover how some malicious groups disable features in Alibaba Cloud ECS instances for illicit mining of Monero...

China suspends deal with Alibaba for not sharing Log4j 0-day first with the government

China's internet regulator, the Ministry of Industry and Information Technology MIIT, has temporarily suspended a partnership with Alibaba Cloud, the cloud computing subsidiary of e-commerce giant Alibaba Group, for six months on account of the fact that it failed to promptly inform the governmen...

Cybercriminals Target Alibaba Cloud for Cryptomining, Malware

Cybercriminals are targeting Alibaba Elastic Computing Service ECS instances, disabling certain security features to further their cryptomining goals. Alibaba offers a few unique options that make it a highly attractive target for attackers, researchers noted. Register now for our LIVE event!...