SoftwareSystemSecurity-2019

SoftwareSystemSecurity-2019 सॉफ्टवेयर सिस्टम सुरक्षा अंतिम पाठ्यक्रम असाइनमेंट: भेद्यता पुनरुत्पादन CVE-2018-4878 Flash 0day...

CVE-2018-4878

المؤلف والاعتمادات المؤلف: فينسنت يو @vysecurity الاعتمادات: @evi1cg: ساعدني في الاختبار وأبقاني متحمسًا @smgoreli: صاحب الـ PoC الأصلي لتطبيق Calc.exe @kbandla: هو يعلم، وأنا أعلم. ; إخلاء المسؤولية طُوّر لتشجيع المزيد من تطوير نصوص Aggressor البرمجية. استخدمه فقط في اختبارات الاختراق المصرح بها...

CVE-2018-4878

Auteur et crédits Auteur : Vincent Yiu @vysecurity Crédits : @evi1cg : m'a aidé à tester et m'a gardé motivé @smgoreli : PoC original de Calc.exe @kbandla : Il le sait, et je le sais. ; Avertissement Développé pour encourager davantage le développement de scripts Aggressor. À utiliser uniquement...

CVE-2018-4878

لا يحتوي هذا المستودع على ملف README...

malware-samples

malware-samples مجموعة من عينات البرمجيات الخبيثة ومعلومات التحليل المفصّل المرتبطة بها، ويُرجَّح أن معظمها مذكور في http://blog.inquest.net أو https://twitter.com/inquest. تأكد أيضًا من الاطلاع على قسم الفحص العميق للملفات DFI في https://labs.inquest.net، حيث تتوفر واجهة تفاعلية قابلة للبحث...

CVE-2018-4878

وحدة Metasploit لـ CVE-2018-4878 ملف SWF مبني على PoC بواسطة Michael Gorelik. انسخ CVE-2018-4878.swf إلى data/exploits...

Mageia: Security Advisory (MGASA-2018-0120)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Threat profile: Egregor ransomware is making a name for itself

What is Egregor? Egregor ransomware is a relatively new ransomware first spotted in September 2020 that seems intent on making its way to the top right now. Egregor is considered a variant of Ransom.Sekhmet based on similarities in obfuscation, API-calls, and the ransom note. As weve reported in...

Exploit kits: spring 2019 review

Exploit kit activity remains fairly unchanged since our last winter review in terms of active distribution campaigns. But this spring edition will feature a new exploit kit and another atypical EK, in that it specifically goes after routers. The main driver behind these drive-by download attacks...

Exploit kits: winter 2019 review

Active malvertising campaigns in December and the new year have kept exploit kit activity from hibernating in winter 2019. We mostly observed Fallout and RIG with the occasional, limited GrandSoft appearance for wider geo-targeting. In addition, narrowly-focused exploit kits such as Magnitude,...

Underminer exploit kit improves in its latest iteration

One of the most interesting exploit kits we track is also a bit of an elusive one, and as such does not receive the same scrutiny as its RIG and Fallout counterparts. Underminer was mentioned in our Fall 2018 round up, and at the time was using CVE-2018-8174 Internet Explorer and CVE-2018-4878...

Exploit kits: fall 2018 review

Exploit kit EK activity continues to surprise us as the weather cools, the leaves change, and we move into the fall of 2018. Indeed, shortly after our summer review, a new exploit kit was discovered, and while no new vulnerabilities were added to the current EKs, several malvertising chains are...

To see the Hidden Bee how to use a new vulnerability propagation-vulnerability warning-the black bar safety net

! Write in front of words Recently we found a to attempt to exploit CVE-2018-4878 Flash Player vulnerability, vulnerability to attack, its sequence and we currently find any loopholes to use the tool are not the same. After investigation, we found that this is a Chinese security company qihoo 360...

APT Trends Report Q2 2018

In the second quarter of 2017, Kaspersky Lab's Global Research and Analysis Team GReAT began publishing summaries of the quarter's private threat intelligence reports, in an effort to make the public aware of the research we have been conducting. This report serves as the latest installment,...

RIG Exploit Kit Delivering Monero Miner Via PROPagate Injection Technique

Introduction Through FireEye Dynamic Threat Intelligence DTI, we observed RIG Exploit Kit EK delivering a dropper that leverages the PROPagate injection technique to inject code that downloads and executes a Monero miner similar activity has been reported by Trend Micro. Apart from leveraging a...

RIG Exploit Kit Delivering Monero Miner Via PROPagate Injection Technique

Introduction Through FireEye Dynamic Threat Intelligence DTI, we observed RIG Exploit Kit EK delivering a dropper that leverages the PROPagate injection technique to inject code that downloads and executes a Monero miner similar activity has been reported by Trend Micro. Apart from leveraging a...

Exploit kits: Spring 2018 review

Since our last report on exploit kits, there have been some new developments with the wider adoption of the February Flash zero-day, as well as the inclusion of a new exploit for Internet Explorer. We have not seen that many changes in the drive-by landscape for a long time, although these are th...

Flash ActiveX 28.0.0.137 - Code Execution Exploit (1)

Exploit for windows platform in category local exploits CVE-2018-4878 flash exploit Pop up a calculator - tested with installation of flash activeX plugin 28.0.0.137 Download: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/44744.xlsx 0day.today 2018-05-2...

Flash ActiveX 28.0.0.137 - Code Execution Exploit (2)

Exploit for windows platform in category local exploits CVE-2018-4878 Pop up a calculator - Requires Flash ActiveX 28.0.0.137 Download: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/44745.swf 0day.today 2018-05-24...

CVE-2018-4878 case: for a Hong Kong Telecommunications Company website is intrusion investigations-vulnerability and early warning-the black bar safety net

! Earlier, a researchers found that a Hong Kong Telecommunications Company website hacking attack, 3 May 21, Morphisec laboratory on the site of attack to carry out the investigation, investigators eventually found that the telecommunications company of the Group's official website was hacked, th...