Threat Outbreak Alert RuleID32382: Email Messages Distributing Malicious Software on April 5, 2018

Medium Alert ID: 57421 First Published: 2018 April 9 19:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32382 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32363: Email Messages Distributing Malicious Software on April 3, 2018

Medium Alert ID: 57319 First Published: 2018 April 9 16:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32363 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32415: Email Messages Distributing Malicious Software on April 6, 2018

Medium Alert ID: 57441 First Published: 2018 April 9 15:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32415 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32374: Email Messages Distributing Malicious Software on April 6, 2018

Medium Alert ID: 57420 First Published: 2018 April 7 01:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32374 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32384: Email Messages Distributing Malicious Software on April 4, 2018

Medium Alert ID: 57404 First Published: 2018 April 4 23:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32384 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32371: Email Messages Distributing Malicious Software on April 4, 2018

Medium Alert ID: 57398 First Published: 2018 April 4 22:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32371 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32365: Email Messages Distributing Malicious Software on April 3, 2018

Medium Alert ID: 57322 First Published: 2018 April 3 18:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32365 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32355: Email Messages Distributing Malicious Software on April 2, 2018

Medium Alert ID: 57311 First Published: 2018 April 2 17:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32355 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID32270: Email Messages Distributing Malicious Software on March 30, 2018

Medium Alert ID: 57301 First Published: 2018 March 30 15:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32270 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID32150: Email Messages Distributing Malicious Software on March 28, 2018

Medium Alert ID: 57294 First Published: 2018 March 28 17:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32150 may contain the following files: Name | Si...

SANNY Malware Delivery Method Updated in Recently Observed Attacks

Introduction In the third week of March 2018, through FireEye’s Dynamic Threat Intelligence, FireEye discovered malicious macro-based Microsoft Word documents distributing SANNY malware to multiple governments worldwide. Each malicious document lure was crafted in regard to relevant regional...

Simple IOC and Incident Response Scanner: Loki

LOKI is a free and simple IOC scanner, a complete rewrite of main analysis modules of our full featured APT Scanner THOR. IOC stands for „Indicators of Compromise“. These indicators can be derived from published incident reports, forensic analyses or malware sample collections in your Lab. LOKI...

CVE-2018-7728

An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFFHandler.cpp mishandles a case of a zero length, leading to a heap-based buffer over-read in the MD5Update function in third-party/zuid/interfaces/MD5.cpp...

CVE-2018-7728

An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFFHandler.cpp mishandles a case of a zero length, leading to a heap-based buffer over-read in the MD5Update function in third-party/zuid/interfaces/MD5.cpp...

CVE-2018-7728

An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFFHandler.cpp mishandles a case of a zero length, leading to a heap-based buffer over-read in the MD5Update function in third-party/zuid/interfaces/MD5.cpp...

MainWP Child <= 3.4.4 - Authentication Bypass

Not authorized attacker could gain full control of target application if he knows the administrative user name. In case of openssl installed on the server then one request is enough and in case of md5 verification 100k requests will do the job...

Threat Analysis: ROKRAT Malware

ROKRAT also referred to as DOGcall is a family of malware that has been used by attackers originating from North Korea. The family continues to evolve and adopt techniques from other families also used by the same attack group. The ROKRAT core payload is typically deployed by a loader, which has...

Threat Outbreak Alert RuleID32138: Email Messages Distributing Malicious Software on February 27, 2018

Medium Alert ID: 56944 First Published: 2018 February 27 17:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32138 may contain the following files: Name |...

Threat Outbreak Alert RuleID31935: Email Messages Distributing Malicious Software on February 26, 2018

Medium Alert ID: 56934 First Published: 2018 February 26 18:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31935 may contain the following files: Name |...

Threat Outbreak Alert RuleID32119: Email Messages Distributing Malicious Software on February 26, 2018

Medium Alert ID: 56939 First Published: 2018 February 26 16:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32119 may contain the following files: Name |...