IT threat evolution Q3 2017

Targeted attacks and malware campaigns Re-enter the dragon In July, we reported on the recent activities of a targeted attack group called 'Spring Dragon' also known as LotusBlossom, whose activities data back to 2012. Spring Dragon makes extensive use of spear-phishing and watering-hole attacks...

fedex.com Open Redirect vulnerability

Vulnerable URL: http://fedex.com/us/demo/claimsonline/detect/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 07.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly...

fedex.com XSS vulnerability

Vulnerable URL: http://www.fedex.com/us/account/fbo/demo/detect/flashdetection.swf?flashContentURL=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 452 VIP...

fedex.com XSS vulnerability

Vulnerable URL: http://www.fedex.com/us/account/fbo/demo/detect/flashdetection.swf?flashContentURL=javascript:alert'OPENBUGBOUNTY' Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 02.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly...

local.fedex.com XSS vulnerability

Vulnerable URL: http://local.fedex.com/search/Colorado/'%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

Source: Deloitte Breach Affected All Company Email, Admin Accounts

Deloitte, one of the world's "big four" accounting firms, has acknowledged a breach of its internal email systems, British news outlet The Guardian revealed today. Deloitte has sought to downplay the incident, saying it impacted "very few" clients. But according to a source close to the...

printonline.fedex.com XSS vulnerability

Vulnerable URL: https://printonline.fedex.com/latest/?selectedCountry=US=login"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| Yes...

Camstudio 2.0 XSS / XSF / Content Forgery

| \ | \ | | | | | | / \ | | | |/ / | |/ / | | | | | | | | | / / | | | / | / | | | | | | | | | | | | | | | |\ \ \ / / // / | | | /\ | | | | | / / / / / | | | \ | | / | | | / \ | | | | | \ | | | | \ \ / / | | | | | \ --. | | | / / | | | | | |/ / | | | | \ V / | | | . | --. \ | | | | | |...

Extending the Airplane Laptop Ban

The Department of Homeland Security is rumored to be considering extending the current travel ban on large electronics for Middle Eastern flights to European ones as well. The likely reaction of airlines will be to implement new traveler programs, effectively allowing wealthier and more frequent...

Threat Outbreak Alert RuleID29121: Email Messages Distributing Malicious Software on May 15, 2017

Medium Alert ID: 53831 First Published: 2017 May 15 20:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29121 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID28285: Email Messages Distributing Malicious Software on March 20, 2017

Medium Alert ID: 53080 First Published: 2017 March 20 18:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28285 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID27744: Email Messages Distributing Malicious Software on February 10, 2017

Medium Alert ID: 52647 First Published: 2017 February 13 13:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27744 may contain the following files: Name |...

Threat Outbreak Alert RuleID27331: Email Messages Distributing Malicious Software on January 30, 2017

Medium Alert ID: 52470 First Published: 2017 January 30 14:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27331 may contain the following files: Name |...

printonline.fedex.com XSS vulnerability

Open Bug Bounty ID: OBB-195271 Description| Value ---|--- Affected Website:| printonline.fedex.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fedex.com XSS vulnerability

Vulnerable URL: http://www.fedex.com/us/account/fbo/demo/detect/flashdetection.swf?flashContentURL=javascript:alert'OPENBUGBOUNTY' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 37...

Threat Outbreak Alert RuleID23127: Email Messages Distributing Malicious Software on May 26, 2016

Medium Alert ID: 46420 First Published: 2016 May 26 21:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23127 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID22938: Email Messages Distributing Malicious Software on May 18, 2016

Medium Alert ID: 46266 First Published: 2016 May 18 15:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22938 may contain the following files: Name | Size...

FedEx Mobile - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application FedEx Mobile published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID21881: Email Messages Distributing Malicious Software on March 24, 2016

Medium Alert ID: 44285 First Published: 2016 March 24 15:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21881 may contain the following files: Name | Si...

printonline.fedex.com XSS vulnerability

Open Bug Bounty ID: OBB-133887 Description| Value ---|--- Affected Website:| printonline.fedex.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...