Emotet Rises Again: Evades Macro Security via OneNote Attachments

The notorious Emotet malware, in its return after a short hiatus, is now being distributed via Microsoft OneNote email attachments in an attempt to bypass macro-based security restrictions and compromise systems. Emotet, linked to a threat actor tracked as Gold Crestwood, Mummy Spider, or TA542,...

FakeCalls Vishing Malware Targets South Korean Users via Popular Financial Apps

An Android voice phishing aka vishing malware campaign known as FakeCalls has reared its head once again to target South Korean users under the guise of over 20 popular financial apps. "FakeCalls malware possesses the functionality of a Swiss army knife, able not only to conduct its primary aim b...

Clop ransomware is victimizing GoAnywhere MFT customers

According to information gathered by BleepingComputer, the Clop ransomware group has claimed responsibility for the ransomware attacks that are tied to a vulnerability in the Fortra GoAnywhere MFT secure file-sharing solution. As we reported on February 8, Fortra released an emergency patch 7.1.2...

Malicious code in rawrequest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b9c75bf32c6679c49b3a17ee9ce320dfb26411c4fb2a7cf0fa4f06ceea5ae033 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqguiproofad (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2038f714e65a7ca4986eb7682c8618bbe9cef3aa2ae698dfb2a8321669c84b29 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfvisapaypalmine (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3a524c8256175ba1602631d62ca2c164baceef5887f1703949ab0176bb3b458d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqccstringmask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ad3667ef6b7620604468e627b774f2339b75086dc8eb705cbaaa95acd784e178 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Acronis: IDOR in backup recovery functionality

The vulnerability allowed an authenticated attacker to recover a backup belonging to another user by using the user's machine UUID, backup ID, and other parameters to configure and run a recovery plan...

CVE-2021-27788

HCL Verse is susceptible to a Cross Site Scripting XSS vulnerability. By tricking a user into clicking a crafted URL, a remote unauthenticated attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, or other...

Malicious code in esqnvidiamaskvirtual (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3f0028f8281cde48c2f976c5c48b5820bc8c64e5da89269641ce288bfad868d5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Hackers Exploiting Remote Desktop Software Flaws to Deploy PlugX Malware

Security vulnerabilities in remote desktop programs such as Sunlogin and AweSun are being exploited by threat actors to deploy the PlugX malware. AhnLab Security Emergency Response Center ASEC, in a new analysis, said it marks the continued abuse of the flaws to deliver a variety of payloads on...

Threat Actors Exploit Microsoft OneNote for Malware Delivery via Phishing Attacks

Threat Level Attack Report Follow Hive Pro for a detailed threat advisory, download the pdf file here from HiveForce Labs. Summary Cybercriminals are using Microsoft OneNotes ability to embed files to deliver malware to users via social engineering techniques. OneNote allows users to organize...

PT-2023-21005 · Unknown · Best Pos Management System

Name of the Vulnerable Software and Affected Versions: Best POS Management System version 1.0 Description: A cross-site scripting XSS issue exists in the /kruxton/navbar.php file, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter...

Malicious code in esqnvidiaadram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx df81ceb2dfc3d91db398dd60bef12374d2d9b31b3b09fd2371d124ea8ed0773a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfgetstudyram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fdda7d56b6aa6eb73f92bed1357541a275155187c112794075d779a88e26c7ed EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfsupergameencode (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx af6f2b9e4bedd9764c7ad96b9866e69e2e2592a7a123c456c10fa58eaad0774f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libcraftlgtbload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5baa51be47458710923d431708febf1cec900cbcd510cfa9787632b2721658fc EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpkillpeppep (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 37dccf1ff05e4a3712931d1b54a982485c816eaec6f8073688f78dd71c97ae8d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tppongvisapip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 97034062effeb064e121185bdcc8b8d0277442b566e4c5049181bec477282e08 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqpostintelcpu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx beacee9777797c5d8ee21c9316699e3434831a6a013e3babf2e0d8c81a1e51a5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...