Feb2023-CVE-2021-21974-OSINT

Feb2023-CVE-2021-21974-OSINT Shodanの結果 および Censysからの身代金要求の分析 Shodanについて: 自身の分析の基礎として使用できるスクリプト、またはShodanがスクレイピングする際に結果を更新してさらに収集するためのスクリプトを提供しています。また、関連するトランザクションのあるウォレットアドレスをblockstream.info APIに問い合わせるために使用できるPythonスクリプトも含めています。 本稿執筆時点で、500以上の結果がありました。これらの結果は提供されたCSVに記載されており、身代金の金額、ビットコインウォレット、T...

Wallet-Transaction-Monitor

지갑 거래 모니터 이 스크립트는 비트코인 지갑 주소를 모니터링하고 잔액 변경 또는 새 거래가 있을 때 사용자에게 알립니다. 들어오고 나가는 거래와 해당 금액 및 타임스탬프에 대한 실시간 업데이트를 제공합니다. 또한 Windows에서 새 거래가 발생하면 소리 알림을 재생할 수 있습니다. 변경 로그 - 2023-07-10 사용자 지정 이름으로 여러 비트코인 지갑을 모니터링하는 기능 추가 정보를 텍스트 파일에 저장하는 옵션 추가 몇 주 내에 더 많은 기능이 추가될 예정입니다 요구 사항 Python 3.x requests 라이브러리:...

IoC_Attack_ESXi_Feb_2023

IoCAttackESXiFeb2023 Colección de IoCs disponibles y relacionados con los ataques a infraestructuras ESXi ocurridos a partir del viernes 3 de febrero de 2023. Noticias Aquí tienes algunas referencias sobre el ataque: https://www.cert.ssi.gouv.fr/alerte/CERTFR-2023-ALE-015/...

Scalar-Venom-Attack

本稿では、現代の暗号鍵管理インフラストラクチャで発見された暗号上の脆弱性を分析し、特に楕円曲線秘密鍵を扱う際のハードウェアセキュリティモジュールHSMのアーキテクチャにおける重大な欠陥に焦点を当てます。この研究は、認定された暗号デバイスにおける不十分に隔離されたRAM管理を悪用する攻撃のクラスに注目しています。現代のビットコイン暗号エコシステムにおいて、秘密鍵のセキュリティは、世界中で数兆ドル相当のデジタル資産を保護するための基本的な要件です。FIPS...

Phoenix-Rowhammer-Attack-CVE-2025-6202

本稿では、Phoenix Rowhammer攻撃（CVE-2025-6202）がもたらすシステムレベルの暗号セキュリティ上の脅威について考察する。この攻撃は、ハードウェアレベルのビット操作を通じてDDR5...

CVE-2018-1000851

Copay Bitcoin Wallet version 5.01 to 5.1.0 included. contains a Other/Unknown vulnerability in wallet private key storage that can result in Users' private key can be compromised. . This attack appear to be exploitable via Affected version run the malicious code at startup . This vulnerability...

CVE-2013-7372

The engineNextBytes function in classlib/modules/security/src/main/java/common/org/apache/harmony/security/provider/crypto/SHA1PRNGSecureRandomImpl.java in the SecureRandom implementation in Apache Harmony through 6.0M3, as used in the Java Cryptography Architecture JCA in Android before 4.4 and...

EUVD-2018-2038

Malware in sbrugna...

EUVD-2018-1785

Malware in sbrugna...

MultiBit HD Security Vulnerability

MultiBit HD is a bitcoin wallet open-sourced by MultiBit. A security vulnerability exists in versions prior to MultiBit HD 0.1.2 that stems from not setting the Message Authentication Code MAC...

Faux ‘DarkSide’ Gang Takes Aim at Global Energy, Food Sectors

Several organizations in the oil, gas and food sectors have received threatening emails from cybercriminals posing as DarkSide – the ransomware gang behind the Colonial Pipeline hack. According to researchers at Trend Micro, threat actors are taking advantage of the notoriety around the pipeline...

U.S. Pipeline Ransomware Attackers Go Dark After Servers and Bitcoin Are Seized

Just as Colonial Pipeline restored all of its systems to operational status in the wake of a crippling ransomware incident a week ago, DarkSide, the cybercrime syndicate behind the attack, claimed it lost control of its infrastructure, citing a law enforcement seizure. All the dark web sites...

bch-wallet-plugin-postoffice (>=1.0.0, <=1.0.8), bitcoin-wallet-api (>=0.0.5, <=0.1.6) potentially affected by CVE-2020-15130 via slpjs (>=0.22.5, <=0.23.3)

slpjs NPM version =0.22.5, =1.0.0, =0.0.5, =0.1.6 Source cves: CVE-2020-15130 Source advisory: OSV:GHSA-CC2P-4JHR-XHHX...

Several High-Profile Accounts Hacked in the Biggest Twitter Hack of All Time

Social media platform Twitter, earlier today on Wednesday, was on fire after it suffered one of the biggest cyberattacks in its history. A number of high-profile Twitter accounts, including those of US presidential candidate Joe Biden, Amazon CEO Jeff Bezos, Bill Gates, Elon Musk, Uber, and Apple...

Twitter Confirms it was Hacked in an Unprecedented Cryptocurrency Scam

Twitter locked down thousands of verified accounts belonging to elite Twitter users and high-profile companies Wednesday afternoon in an effort to prevent hackers from perpetrating a massive cryptocurrency scam. The accounts fell victim to a compromise of the company’s internal systems by a group...

bch-wallet-plugin-postoffice (>=1.0.0, <=1.0.8), bitcoin-wallet-api (>=0.0.5, <=0.1.6) potentially affected by CVE-2020-11071 via slpjs (>=0.22.5, <=0.23.3)

slpjs NPM version =0.22.5, =1.0.0, =0.0.5, =0.1.6 Source cves: CVE-2020-11071 Source advisory: OSV:GHSA-JC83-CPF9-Q7C6...

Rapidly Growing Electrum Botnet Infects Over 152,000 Users; Steals $4.6 Million

An ongoing attack against Electrum Bitcoin wallets has just grown bigger and stronger with attackers now targeting the whole infrastructure of the exchange with a botnet of over 152,000 infected users, raising the amount of stolen users' funds to USD 4.6 million. Electrum has been facing cyber...

Electrum DDoS botnet reaches 152,000 infected hosts

By Jérôme Segura, Adam Thomas, and S!Ri We have been closely monitoring the situation involving the continued attacks against users of the popular Electrum Bitcoin wallet. Initially, victims were being tricked to download a fraudulent update that stole their cryptocurrencies. Later on, the threat...

TAU Threat Intelligence Notification – Fake Movie File Attack Targeting Cryptocurrency

A malicious Windows shortcut file is posing as a movie available on a torrent site - its payload is used to conduct web-injection, ultimately targeting victim’s web searches in browsers like Chrome, Firefox and Internet Explorer. The payload has the ability to search for and steal cryptocurrency...

CVE-2018-1000851

Copay Bitcoin Wallet version 5.01 to 5.1.0 included. contains a Other/Unknown vulnerability in wallet private key storage that can result in Users' private key can be compromised. . This attack appear to be exploitable via Affected version run the malicious code at startup . This vulnerability...