Malicious code in rs-lookout-sandbox-poc (npm)

Source: amazon-inspector 4f28ed1c404dad5afc7b70b345eeef6f81e04dcee77be3a7553956c7a43f8e7c On module load, index.js reads os.userInfo.username and issues an HTTPS GET to a hardcoded third-party collector at https://webhook.site/553dad0e-c841-46a8-b07d-213b52a24686/, transmitting the installer's...

MAL-2026-18109 Malicious code in rs-lookout-sandbox-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f28ed1c404dad5afc7b70b345eeef6f81e04dcee77be3a7553956c7a43f8e7c On module load, index.js reads os.userInfo.username and issues an HTTPS GET to a hardcoded third-party collector at...

grimoire-elk (>=0.55.0, <=0.58.0), grimoirelab (>=0.2.52, <=0.2.53) +4 more potentially affected by unknown CVE via dulwich (0.21.4.1)

dulwich PYPI version 0.21.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoire-elk =0.55.0, =0.2.52, =0.1.0, =0.13.2, =0.4.5, =0.0.4, =0.0.6 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

kingarthur (0.2.2rc3), lookout-sdk-ml (0.4.3) +5 more potentially affected by unknown CVE via dulwich (0.20.45)

dulwich PYPI version 0.20.45 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - kingarthur 0.2.2rc3 - lookout-sdk-ml 0.4.3 - perceval =0.20.0rc4, =0.20.0rc5 - perceval-mozilla 0.3.2rc3 - perceval-opnfv 0.2.2rc3 -...

grimoire-elk (>=0.55.0, <=0.58.0), grimoirelab (>=0.2.52, <=0.2.53) +4 more potentially affected by unknown CVE via dulwich (0.21.4.1)

dulwich PYPI version 0.21.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - grimoire-elk =0.55.0, =0.2.52, =0.1.0, =0.13.2, =0.4.5, =0.0.4, =0.0.6 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

EUVD-2012-6191

Malware in sbrugna...

EUVD-2013-3513

Malware in sbrugna...

Exploit for CVE-2016-4655

This is a PoC exploit for iOS 9.3.5, targeting CVE-2016-4655 and CVE-2016-4656. The exploit aims to gain root access over the device by exploiting kernel vulnerabilities. The supported devices are listed in offsetfinder.h. The exploit is based on the original disclosure by Lookout and the OS X...

CVE-2013-3579

The Lookout Mobile Security application before 8.17-8a39d3f for Android allows attackers to cause a denial of service application crash via a crafted application that sends an intent to com.lookout.security.ScanTell with zero arguments...

APT trends report Q1 2023

For more than five years, the Global Research and Analysis Team GReAT at Kaspersky has been publishing quarterly summaries of advanced persistent threat APT activity. These summaries are based on our threat intelligence research; and they provide a representative snapshot of what we have publishe...

Google Warns of New Spyware Targeting iOS and Android Users

The spyware has been used to target people in Italy, Kazakhstan, and Syria, researchers at Google and Lookout have found...

Malicious code in lookout-dingbats (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 627c1c8da2909d39dbcb33c4df6af3c6847247f928b108b944228130c5df6e96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4395 Malicious code in lookout-dingbats (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 627c1c8da2909d39dbcb33c4df6af3c6847247f928b108b944228130c5df6e96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

This New Android Malware Can Gain Root Access to Your Smartphones

An unidentified threat actor has been linked to a new Android malware strain that features the ability to root smartphones and take complete control over infected smartphones while simultaneously taking steps to evade detection. The malware has been named "AbstractEmu" owing to its use of code...

KODAK Lookout Converged Video System has a Logic Flaw Vulnerability

Ltd. is a leading provider of video and security products and solutions. A logic flaw vulnerability exists in KODAK Lookout Converged Video System, which can be exploited by attackers to obtain sensitive information...

KODAK Lookout Converged Video System has a file upload vulnerability.

Ltd. is a leading provider of video and security products and solutions. A file upload vulnerability exists in the KODAK Lookout Converged Video System, which can be exploited by attackers to execute arbitrary commands...

KODAK Lookout Converged Video System has Information Leakage Vulnerability

Ltd. is a leading provider of video and security products and solutions. An information leakage vulnerability exists in KODAK Lookout Converged Video System, which can be exploited by attackers to obtain sensitive information...

Researchers Uncover Android Spying Campaign Targeting Pakistan Officials

Two new Android surveillanceware families have been found to target military, nuclear, and election entities in Pakistan and Kashmir as part of a pro-India, state-sponsored hacking campaign. Dubbed Hornbill and Sunbird, the malware impersonates legitimate or seemingly innocuous services to cover...

Digitally Signed Bandook Malware Once Again Targets Multiple Sectors

A cyberespionage group with suspected ties to the Kazakh and Lebanese governments has unleashed a new wave of attacks against a multitude of industries with a retooled version of a 13-year-old backdoor Trojan. Check Point Research called out hackers affiliated with a group named Dark Caracal in a...

Heap out-of-bounds read vulnerability exists in ABC Lookout of Shanghai Zhanmeng Network Technology Co. Ltd (CNVD-2020-66605)

ABC Viewer is a permanent free image viewing software, intelligently turns on hardware acceleration and supports a variety of image formats. Shanghai Zhanmeng Network Science and Technology Co., Ltd. ABC to see the map of the existence of heap out-of-bounds read vulnerability, the vulnerability f...