786 matches found
PT-2017-2471
Name of the Vulnerable Software and Affected Versions Microsoft Office versions 2007 through 2016 Description A remote code execution issue exists due to the way Microsoft Office handles objects in memory. This could allow a remote attacker to execute arbitrary code by using a specially crafted...
Watch Out for Malware If You're Interested in North Korean Missile Program
If you hold an interest in the North Korean Missile Program and are one of those curious to know capabilities of the recently tested North Korean long-range missile than you could be a target of a new malware campaign. North Korea claims to have conducted the first test of an intercontinental...
stdweb2.korean.go.kr XSS vulnerability
Vulnerable URL: http://stdweb2.korean.go.kr/search/Listdic.jsp?SearchPart=Simple=%22%3EKeritzy%3Cimg%20src=x%20onerror=prompt%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
Hackers Demand Banks $315k Ransom or Face DDoS Attacks
By Waqas Armada Collective, a group of online attackers, is demanding a ransom payment of $315,000 from South Korean banks In the case of refusal, the group has threatened the banks with a series of massive Distributed Denial of Service DDoS attacks. The threats came days after South Korean web...
A week in security (June 19 – June 25)
Last week, we expanded on all the different technologies that Malwarebytes uses to break the attack chain and our Incident Response solution. We also warned you about a Roblox Robux generator scam and a phish targeting customers of Barclays Bank. Below are notable news stories and security-relate...
US Warns of 'DeltaCharlie' – A North Korean DDoS Botnet Malware
The United States government has released a rare alert about an ongoing, eight-year-long North Korean state-sponsored hacking operation. The joint report from the FBI and U.S. Department of Homeland Security DHS provided details on "DeltaCharlie," a malware variant used by "Hidden Cobra" hacking...
Description of the security update for Office 2013: June 13, 2017
Description of the security update for Office 2013: June 13, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Judy Android Malware Infects Over 36.5 Million Google Play Store Users
Security researchers have claimed to have discovered possibly the largest malware campaign on Google Play Store that has already infected around 36.5 million Android devices with malicious ad-click software. The security firm Checkpoint on Thursday published a blog post revealing more than 41...
WannaCry Ransom Note Written by Chinese, English Speaking Authors
The WannaCry ransom note was likely written by Chinese- and English-speaking authors, adding more intrigue to the investigation into whether it was indeed a North Korean APT using stolen NSA exploits to spread ransomware worldwide. Analysts at Flashpoint, including some fluent in Chinese, said th...
The WannaCry Ransomware Has a Link to Suspected North Korean Hackers
A Google researcher has identified a telltale chunk of code shared between the ransomware and malware used by suspected DPRK hackers. The post The WannaCry Ransomware Has a Link to Suspected North Korean Hackers appeared first on WIRED...
Blackmoon Banking Trojan Using New Infection Technique
New clues have surfaced on how the Blackmoon banking Trojan is infecting its victims using a new framework to deliver the malware. “We noticed recent campaigns two weeks ago where Blackmoon had shifted its infection strategy and is now utilizing a unique and interesting technique,” said Hardik...
New RAT Targets Koreans And Is Skilled At Evading Detection
Researchers have identified a stealthy new remote access tool dubbed ROKRAT that leverages a bevy of anti-detection measures. The RAT targets the Korean language Microsoft Word alternative Hangul Word Processor HWP. ROKRAT was detected several weeks ago by Cisco Talos, who said the malware is par...
August 2, 2016 — KB3176929 (OS Build 14393.10)
None None...
Reverse engineering DUBNIUM –Stage 2 payload analysis
Recently, we blogged about the basic functionality and features of the DUBNIUM advanced persistent threat APT activity group Stage 1 binary and Adobe Flash exploit used during the December 2015 incident Part 1, Part 2. In this blog, we will go through the overall infection chain structure and the...
Philippines Bank hit by SWIFT Hacking Group allegedly linked to North Korea
SWIFT Bank Hackers have attacked another bank in the Philippines using the same modus operandi as that in the $81 Million Bangladesh Bank heist. Security researchers at Symantec have found evidence that malware used by the hacking group shares code similarities with the malware families used in...
Learn Korean. Speak Korean - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Learn Korean. Speak Korean published at the 'play' market has multiple vulnerabilities...
Learn Korean - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Learn Korean published at the 'play' market has multiple vulnerabilities...
GongDa vs. Korean News
On Jan. 27, we observed visitors to a Korean news site being redirected to the GongDa Exploit Kit EK, potentially exposing them to malware infection. We will be referring to this site as KNS. GongDa is an exploit kit that can compromise vulnerable endpoints by use of exploits, allowing harmful...
GongDa vs. Korean News
On Jan. 27, we observed visitors to a Korean news site being redirected to the GongDa Exploit Kit EK, potentially exposing them to malware infection. We will be referring to this site as KNS. GongDa is an exploit kit that can compromise vulnerable endpoints by use of exploits, allowing harmful...
koreanwikiproject.com XSS vulnerability
Vulnerable URL: http://www.koreanwikiproject.com/wiki/thumb.php?f=xssposed%23%3Cbody%09onload=confirm%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:|...