9 matches found
yetAnotherObfuscator
yetAnotherObfuscator Инструмент обфускации на C, который может обойти антивирус Windows Defender. Я создал этот инструмент в основном как повод узнать больше о C и о том, как работают обфускаторы. Это альфа -версия, так что ожидайте пару забавных багов. Использование: Перетащите C exe-файл в...
RedLine-Stealer-C2-Defender-Bypass-Payload-Analysis
1. C2-подключение – IP 198.46.86.63 Сетевой анализ показывает, что RedLine Stealer устанавливает соединение с удалённым IP-адресом 198.46.86.63. Этот IP, вероятно, является сервером управления C2 вредоносной программы, используемым для кражи данных и доставки команд. Ключевые наблюдения: IP-адрес...
MeterPwrShell
Outil inactif - Raison : occupé avec autre chose root@kitploit: . . . / \ / | \ \ / /| | | | | | \ \ / \ / / \ / \ \ | / / | \ \ | | / | | | | / / / Y \ /| | \ /| | / | \ / | | / | Y \ /| || |/ \ | /\ | \ | || // || / /|| /\ /| / / / / / / / / MeterPwrShell2 Outil automatisé qui...
exch_CVE-2021-42321
exchCVE-2021-42321 Ce document concerne l'outil impliqué dans l'article de l'équipe de sécurité 7bits « Sécurité DotNet - Reproduction de CVE-2021-42321 » La chaîne TypeConfuse est modifiée pour écrire dans des fichiers, contourner Windows Defender, désactiver le processus de démarrage de w3wp.ex...
MAL-2026-10064 Malicious code in multer-orm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb45c09aa7a237b2b9ff18ccf6426b76a4f46e5ea665c7747f35a345940e161 multer-orm is a typosquat of the widely used multer middleware. Its README is copied from multer, but the package adds a load-time dropper in...
Researchers Uncover Mining Operation Using ISO Lures to Spread RATs and Crypto Miners
A financially motivated operation codenamed REF1695 has been observed leveraging fake installers to deploy remote access trojans RATs and cryptocurrency miners since November 2023. "Beyond cryptomining, the threat actor monetizes infections through CPA Cost Per Action fraud, directing victims to...
CISA Adds Five Known Vulnerabilities to Catalog
CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-32046 Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability CVE-2023-32049 Microsoft Windows Defender SmartScreen Security Feature Bypass...
Threat Actors Adopt Havoc Framework for Post-Exploitation in Targeted Attacks
An open source command-and-control C2 framework known as Havoc is being adopted by threat actors as an alternative to other well-known legitimate toolkits like Cobalt Strike, Sliver, and Brute Ratel. Cybersecurity firm Zscaler said it observed a new campaign in the beginning of January 2023...
