Mamba Ransomware Resurfaces in Brazil, Saudi Arabia

Mamba was among the first samples of ransomware that encrypted hard drives rather than files that was detected in public attacks, primarily against organizations in Brazil and in a high-profile incursion against the San Francisco Municipal Transportation Agency last November. Researchers at...

latinbasket.com XSS vulnerability

Vulnerable URL: http://www.latinbasket.com/Brazil/basketball.asp?women=1/-///'/"//--...

Beware! Fireball Malware Infects Nearly 250 Million Computers Worldwide

Security researchers have discovered a massive malware campaign that has already infected more than 250 million computers across the world, including Windows and Mac OS. Dubbed Fireball, the malware is an adware package that takes complete control of victim's web browsers and turns them into...

LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME LAquis SCADA

CVSS v3 5.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: LCDS - Leão Consultoria e Desenvolvimento de Sistemas Ltda ME Equipment: LAquis SCADA Vulnerability: Path Traversal AFFECTED PRODUCTS The following versions of LAquis SCADA, an industrial automation software, are...

CVE-2017-5945

An issue was discovered in the PoodLL Filter plugin through 3.0.20 for Moodle. The vulnerability exists due to insufficient filtration of user-supplied data in the "poodllaudiourl" HTTP GET parameter passed to the "filterpoodllmoodle322016112802/poodll/mp3recorderskins/brazil/index.php" URL. An...

Mamba Ransomware Encrypts Hard Drives Rather Than Files

Just when we thought ransomware’s evolution had peaked, a new strain has been discovered that forgoes the encryption of individual files, and instead encrypts a machine’s hard drive. The malware, called Mamba, has been found on machines in Brazil, the United States and India, according to...

Brazil Freezes $11.7 Million of Facebook Funds for Not Complying with Court Orders

Facebook's legal war with Brazilian government seems to be never-ending. Facebook-owned cross-platform messaging service WhatsApp has already been blocked a total of three times in Brazil since December for failing to comply with a court order asking the company to access WhatsApp data under...

LizardStresser IoT Botnets Part of 400Gbps DDoS Attacks

LizardStresser, a distributed denial of service botnet, has found new life leveraging hundreds of internet-based webcams in attacks against Brazilian-based banks, government agencies as well as a handful of U.S.-based gaming companies. Researchers at the Arbor’s Security Engineering and Response...

Ubiquiti Network Gear Targeted By Worm

ISP equipment maker Ubiquiti Networks is fending off a stubborn worm targeting its networking equipment running outdated AirOS firmware. According to security experts, the worm is already being blamed for crippling networking gear in the Argentina, Brazil, Spain and the United States. Ubiquiti...

On Ransomware Hitting an Online Casino, Brazil Taking WhatsApp Offline, And More

Mike Mimoso, Chris Brook, and Threatpost’s newest reporter, Tom Spring, discuss the week in news, including a first hand account of an online casino’s experience with a Teslacrypt infection, Brazil shutting down WhatsApp, and attackers mining an ADP portal for W-2s. Download:...

Brazilian Judge Overturns 72-Hour WhatsApp Suspension

Following an appeal from WhatsApp’s lawyers, on Tuesday afternoon a Brazilian judge overturned a suspension previously handed down this week that would’ve blocked usage of the messaging app for 72 hours. According to Reuters, on Tuesday afternoon a “different judge from the state tribunal...

Brazil blocks WhatsApp for 72-Hours — Here's Why

In Brief For the second time in past five months, a Brazil court ordered local telecommunications companies to block the popular messaging app WhatsApp for 72 hours, afterFacebook-owned WhatsApp company refused to hand over information requested in a drug trafficking investigation. The WhatsApp's...

Striker Soccer Brazil - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Striker Soccer Brazil published at the 'play' market has multiple vulnerabilities...

Soccer Team Bus Battle Brazil - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Soccer Team Bus Battle Brazil published at the 'play' market has multiple vulnerabilities...

World Cup Brazil Soccer 2014 - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application World Cup Brazil Soccer 2014 published at the 'play' market has multiple vulnerabilities...

Tic Tac Toe World Cup Brazil - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Tic Tac Toe World Cup Brazil published at the 'play' market has multiple vulnerabilities...

3m.com.br XSS vulnerability

Vulnerable URL: http://www.3m.com.br/3M/ptBR/3m-do-brasil/todos-os-produtos-3m-do-brasil/?N=5002385+8711017=%3Cscript%3Ealert%28%22XSSPOSED%22%29%3C%2Fscript%3E=ptBR=cc=scBR=rs=cc Details: Description| Value ---|--- Patched:| Yes, at 01.10.2016 Latest check for patch:| 01.10.2016 11:02 GMT...

Facebook's Vice President Arrested in Brazil for Refusing to Share WhatsApp Data

Apple is not the only technology giant battling against authorities over a court order; Facebook is also facing the same. Brazil’s federal police arrested Facebook Latin America Vice President for failing to comply with court orders to help investigators in a drug trafficking case that involves...

TOTVS RM PORTAL Cross Site Scripting

TOTVS RM PORTAL Educational - Multiple Cross Site Scripting Vulnerabilities Product web page: www.totvs.com.br Author: vesp3r Email: [email protected] Published: 13/02/2016 Vendor Product Description TOTVS pronounced Totus is a Brazilian software company, with headquarters in Sao Paulo. TOTVS w...

brasil.bosch.com.br XSS vulnerability

Vulnerable URL: http://www.brasil.bosch.com.br/pt/br/brmain/newsroom1/news1/news-overview-page.php?fullTextSearch="=0 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...