clamav -- Possible denial of service vulnerability in the AutoIt file parser

The ClamAV project reports: There is a possible denial of service vulnerability in the AutoIt file parser...

Unmasking XE Group: Experts Reveal Identity of Suspected Cybercrime Kingpin

Cybersecurity researchers have unmasked the identity of one of the individuals who is believed to be associated with the e-crime actor known as XE Group. According to Menlo Security, which pieced together the information from different online sources, "Nguyen Huu Tai, who also goes by the names J...

Unmasking XE Group: Experts Reveal Identity of Suspected Cybercrime Kingpin

Cybersecurity researchers have unmasked the identity of one of the individuals who is believed to be associated with the e-crime actor known as XE Group. According to Menlo Security, which pieced together the information from different online sources, "Nguyen Huu Tai, who also goes by the names J...

LodaRAT Malware Resurfaces with New Variants Employing Updated Functionalities

The LodaRAT malware has resurfaced with new variants that are being deployed in conjunction with other sophisticated malware, such as RedLine Stealer and Neshta. "The ease of access to its source code makes LodaRAT an attractive tool for any threat actor who is interested in its capabilities,"...

apkutils (>=1.0.2, <=1.0.4), autoit-ripper (>=1.0.0, <=1.0.1) +8 more potentially affected by CVE-2022-43171 via lief (>=0.9.0, <=0.12.1)

lief PYPI version =0.9.0, =1.0.2, =1.0.0, =0.0.0, =0.0.1, =1.0.0, =0.0.1a0, =0.0.1a1 - pyqbdl 0.1.0 - pysigtool 0.1.4 Source cves: CVE-2022-43171 Source advisory: OSV:GHSA-JVP9-PHWP-P738...

apkutils (>=1.0.2, <=1.0.4), autoit-ripper (>=1.0.0, <=1.0.1) +8 more potentially affected by CVE-2022-43171 via lief (>=0.9.0, <=0.12.1)

lief PYPI version =0.9.0, =1.0.2, =1.0.0, =0.0.0, =0.0.1, =1.0.0, =0.0.1a0, =0.0.1a1 - pyqbdl 0.1.0 - pysigtool 0.1.4 Source cves: CVE-2022-43171 Source advisory: OSV:PYSEC-2022-43140...

apkutils (>=1.0.2, <=1.0.4), autoit-ripper (>=1.0.0, <=1.0.1) +8 more potentially affected by CVE-2022-43171 via lief (>=0.9.0, <=0.12.1)

lief PYPI version =0.9.0, =1.0.2, =1.0.0, =0.0.0, =0.0.1, =1.0.0, =0.0.1a0, =0.0.1a1 - pyqbdl 0.1.0 - pysigtool 0.1.4 Source cves: CVE-2022-43171 Source advisory: MEND:CVE-2022-43171...

apkutils (>=1.0.2, <=1.0.4), autoit-ripper (>=1.0.0, <=1.0.1) +8 more potentially affected by CVE-2022-40922 via lief (>=0.9.0, <=0.12.1)

lief PYPI version =0.9.0, =1.0.2, =1.0.0, =0.0.0, =0.0.1, =1.0.0, =0.0.1a0, =0.0.1a1 - pyqbdl 0.1.0 - pysigtool 0.1.4 Source cves: CVE-2022-40922 Source advisory: OSV:PYSEC-2022-43138...

apkutils (>=1.0.2, <=1.0.4), autoit-ripper (>=1.0.0, <=1.0.1) +8 more potentially affected by CVE-2022-40923 via lief (>=0.9.0, <=0.12.1)

lief PYPI version =0.9.0, =1.0.2, =1.0.0, =0.0.0, =0.0.1, =1.0.0, =0.0.1a0, =0.0.1a1 - pyqbdl 0.1.0 - pysigtool 0.1.4 Source cves: CVE-2022-40923 Source advisory: GHSA-RM2X-HGR8-W343...

apkutils (>=1.0.2, <=1.0.4), autoit-ripper (>=1.0.0, <=1.0.1) +8 more potentially affected by CVE-2022-38306 via lief (>=0.9.0, <=0.12.1)

lief PYPI version =0.9.0, =1.0.2, =1.0.0, =0.0.0, =0.0.1, =1.0.0, =0.0.1a0, =0.0.1a1 - pyqbdl 0.1.0 - pysigtool 0.1.4 Source cves: CVE-2022-38306 Source advisory: OSV:GHSA-52XX-R3G2-P8JM...

apkutils (>=1.0.2, <=1.0.4), autoit-ripper (>=1.0.0, <=1.0.1) +8 more potentially affected by CVE-2022-38495 via lief (>=0.9.0, <=0.12.1)

lief PYPI version =0.9.0, =1.0.2, =1.0.0, =0.0.0, =0.0.1, =1.0.0, =0.0.1a0, =0.0.1a1 - pyqbdl 0.1.0 - pysigtool 0.1.4 Source cves: CVE-2022-38495 Source advisory: GHSA-42VG-2Q93-FJ6J...

apkutils (>=1.0.2, <=1.0.4), autoit-ripper (>=1.0.0, <=1.0.1) +8 more potentially affected by CVE-2022-38306 via lief (>=0.9.0, <=0.12.1)

lief PYPI version =0.9.0, =1.0.2, =1.0.0, =0.0.0, =0.0.1, =1.0.0, =0.0.1a0, =0.0.1a1 - pyqbdl 0.1.0 - pysigtool 0.1.4 Source cves: CVE-2022-38306 Source advisory: GHSA-52XX-R3G2-P8JM...

apkutils (>=1.0.2, <=1.0.4), autoit-ripper (>=1.0.0, <=1.0.1) +8 more potentially affected by CVE-2022-38497 via lief (>=0.9.0, <=0.12.1)

lief PYPI version =0.9.0, =1.0.2, =1.0.0, =0.0.0, =0.0.1, =1.0.0, =0.0.1a0, =0.0.1a1 - pyqbdl 0.1.0 - pysigtool 0.1.4 Source cves: CVE-2022-38497 Source advisory: OSV:GHSA-2P5H-HPJ4-FXGG...

apkutils (>=1.0.2, <=1.0.4), autoit-ripper (>=1.0.0, <=1.0.1) +7 more potentially affected by CVE-2022-38307 via lief (>=0.9.0, <=0.11.5)

lief PYPI version =0.9.0, =1.0.2, =1.0.0, =0.0.0, =0.0.1, =1.0.0, =0.0.1a0, =0.0.1a1 - pyqbdl 0.1.0 - pysigtool 0.1.4 Source cves: CVE-2022-38307 Source advisory: GHSA-X2XX-JW5M-5J86...

apkutils (>=1.0.2, <=1.0.4), autoit-ripper (>=1.0.0, <=1.0.1) +7 more potentially affected by CVE-2022-38497 via lief (>=0.9.0, <=0.11.5)

lief PYPI version =0.9.0, =1.0.2, =1.0.0, =0.0.0, =0.0.1, =1.0.0, =0.0.1a0, =0.0.1a1 - pyqbdl 0.1.0 - pysigtool 0.1.4 Source cves: CVE-2022-38497 Source advisory: OSV:PYSEC-2022-277...

apkutils (>=1.0.2, <=1.0.4), autoit-ripper (>=1.0.0, <=1.0.1) +7 more potentially affected by CVE-2022-38307 via lief (>=0.9.0, <=0.11.5)

lief PYPI version =0.9.0, =1.0.2, =1.0.0, =0.0.0, =0.0.1, =1.0.0, =0.0.1a0, =0.0.1a1 - pyqbdl 0.1.0 - pysigtool 0.1.4 Source cves: CVE-2022-38307 Source advisory: OSV:PYSEC-2022-275...

Trojan.Win32.Autoit.fhj MVID-2022-0638 NULL DACL

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/d871836f77076eeed87eb0078c1911c7B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Autoit.fhj Vulnerability: Named Pipe Null DACL Family: Autoit Type: PE32 MD5...

autoit-ripper (>=1.0.0, <=1.0.1), checksec-py (>=0.0.1, <=0.5.1) +4 more potentially affected by CVE-2021-32297 via lief (>=0.9.0, <=0.10.1)

lief PYPI version =0.9.0, =1.0.0, =0.0.1, =1.0.0, =0.0.1a0, =0.0.1a1 - pysigtool 0.1.4 Source cves: CVE-2021-32297 Source advisory: OSV:GHSA-22X7-VWH9-5W4G...

Purple Fox Rootkit Dropped by Malicious Telegram Installers

A malicious Telegram instant-messaging app installer scurries past a slew of antivirus AV engines to deliver Purple Fox malware, evading detection by separating the attack into bite-sized morsels that fly under the radar. In a Monday report, Minerva Labs said that the attack evades detection by A...

Beware of Fake Telegram Messenger App Hacking PCs with Purple Fox Malware

Trojanized installers of the Telegram messaging application are being used to distribute the Windows-based Purple Fox backdoor on compromised systems. That's according to new research published by Minerva Labs, describing the attack as different from intrusions that typically take advantage of...