1371 matches found
New Downloader for Locky
Through DTI Intelligence analysis, We have been observing Locky malware rise to fame recently. Locky is ransomware that is aggressively distributed via downloaders attached in spam emails, and it may have surpassed the Dridex banking trojan in popularity. In previous campaigns, the ransomware was...
osu!downloader (alpha version) - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application osu!downloader alpha version published at the 'play' market has multiple vulnerabilities...
Offline Map Downloader - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Offline Map Downloader published at the 'play' market has multiple vulnerabilities...
IDM Video Online Downloader - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application IDM Video Online Downloader published at the 'play' market has multiple vulnerabilities...
Video Downloader - Dynamic Code Loading, Exported ContentProvider, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Video Downloader published at the 'play' market has multiple vulnerabilities...
Nzb Leech - usenet downloader - Customized SSL, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Nzb Leech - usenet downloader published at the 'play' market has multiple vulnerabilities...
WordPress Ebook Download Plugin Directory Traversal Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...
Surge in Spam Campaign Delivering Locky Ransomware Downloaders
FireEye Labs is detecting a significant spike in Locky ransomware downloaders due to a pair of concurrent email spam campaigns impacting users in over 50 countries. Some of the top affected countries are depicted in Figure 1. Figure 1. Affected countries As seen in Figure 2, the steep spike start...
Surge in Spam Campaign Delivering Locky Ransomware Downloaders
FireEye Labs is detecting a significant spike in Locky ransomware downloaders due to a pair of concurrent email spam campaigns impacting users in over 50 countries. Some of the top affected countries are depicted in Figure 1. Figure 1. Affected countries As seen in Figure 2, the steep spike start...
Stop Scanning My Macro
FireEye Labs detected an interesting evasion strategy in two recent, large Dridex campaigns. These campaigns changed the attachment file-type and location of malicious logic in an attempt to avoid scanners. Overview Both campaigns used an invoice theme and came from a wide variety of sending...
Stop Scanning My Macro
FireEye Labs detected an interesting evasion strategy in two recent, large Dridex campaigns. These campaigns changed the attachment file-type and location of malicious logic in an attempt to avoid scanners. Overview Both campaigns used an invoice theme and came from a wide variety of sending...
Multiple OS Malicious File Containing JS Downloader
A malicious JavaScript downloader file was observed as part of Locky ransomware campaign. A remote attacker could convince users to manually trigger it. This would allow the malicious code to run and infect the target system...
Microsoft Office Mail Attachment Containing Malicious Downloader
A Microsoft Office Mail attachment containing a malicious downloader was observed as part of Locky ransomware campaign. A remote attacker could send spam e-mails including those downloaders and convince users to manually enable them. This would allow the malicious code to run and infect the targe...
Web Servers Containing Suspicious JavaScript Downloader
An attacker might upload a malicious JavaScript downloader to a web server, and then entice a target victim to access a specially crafted web page, thereby triggering the download of malware...
Project Arsenal X - As HackTheGame But Real
Project Arsenal X New version of my Arsenal X written in Delphi with the following options: + Gmail Inbox + Whois Client + Table + Downloader + Get IP + Locate IP + K0bra SQLI Scanner + Crack multiple hashes + Search admin panel + Port Scanner + Multi Cracker with support for FTP, TELNET, POP3 +...
SlemBunk Part II: Prolonged Attack Chain and Better-Organized Campaign
Introduction Our follow-up investigation of a nasty Android banking malware we identified at the tail end of last year has not only revealed that the trojan is more persistent than we initially realized – thus making for a much more dangerous threat – but that it is also being used as part of an...
The EPS Awakens - Part 2
On Wednesday, Dec. 16, 2015, FireEye published The EPS Awakens, detailing an exploit targeting a previously unknown Microsoft Encapsulated Postscript EPS dict copy use-after-free vulnerability that was silently patched by Microsoft on November 10, 2015. The blog described the technical details of...
Freemake Video Downloader 3.7.1 Code Execution
Document Title: =============== Freemake Video Downloader 3.7.1 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1617 Release Date: ============= 2015-10-12 Vulnerability Laboratory ID VL-ID:...
Freemake VideoDownloader 3.7.1 - Code Execution
Document Title: =============== Freemake VideoDownloader 3.7.1 - Code Execution References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1617 Release Date: ============= 2015-10-12 Vulnerability Laboratory ID VL-ID: ==================================== 1617 Commo...
YesWiki 0.2 - Path Traversal Vulnerability
Exploit for php platform in category web applications Exploit Title: YESWIKI 0.2 - Path Traversal Date: 2015-09-02 Exploit Author: HaHwul Exploit Author Blog: http://www.codeblack.net Vendor Homepage: http://yeswiki.net Software Link: https://github.com/YesWiki/yeswiki Version: yeswiki 0.2 Tested...