7663 matches found
Bye, bye Petya! Decryptor for old versions released.
Following the outbreak of the Petya-based malware in Ukraine, the author of the original version, Janus, decided to release his master key, probably closing the project. You can read the full story here. Based on the released key, we prepared a decryptor that is capable of unlocking all the...
Security Master - Antivirus, VPN, AppLock, Booster - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Security Master - Antivirus, VPN, AppLock, Booster published at the 'play' market has multiple vulnerabilities...
IBM InfoSphere Master Data Management Server Local Information Disclosure Vulnerability
IBM InfoSphere MDM Reference Data Management Hub is a suite of data management solutions from IBM USA. The product provides data management, security and auditing capabilities. A local information disclosure vulnerability exists in IBM InfoSphere MDM Reference Data Management Hub, which originate...
CVE-2017-1309
IBM InfoSphere Master Data Management Server 11.0 - 11.6 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 125463...
CVE-2017-11318
Cobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks when the master server is spoofed. In addition, the attacker can execute system commands remotely by abusing pre-backup events...
SAP NetWeaver Master Data Management Information Disclosure Vulnerability
SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform, the platform can provide development and operation environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver Master Data Management. An attacker could...
Keeping up with the Petyas: Demystifying the malware family
Last June 27, there was a huge outbreak of a Petya-esque malware with WannaCry-style infector in the Ukraine. Since there is still confusion about how exactly this malware is linked to the original Petya, we have prepared this small guide on the background of the Petya family. The origin of Petya...
CVE-2017-11318
Cobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks when the master server is spoofed. In addition, the attacker can execute system commands remotely by abusing pre-backup events...
Decryption Key to Original Petya Ransomware Released
The master key to the original version of the Petya ransomware – not to be confused with the latest and massive Petya/ExPetr outbreak that swept through the Ukraine and parts of Europe last month – has been released, allowing all the victims of previous Petya attacks to unscramble their encrypted...
All this EternalPetya stuff makes me WannaCry
Another week goes by and yet again we have another ransomware outbreak initially dropped by a malicious software update and eventually spreading within internal networks using several methods - including EternalBlue - the leaked exploit from the ShadowBrokers group. Security researchers can’t see...
PDNS Manager Remote Command Execution Vulnerability
Exploit for php platform in category web applications Details ======= Product: PDNS Manager Affected Versions: Git master 3bf4e28 2016-12-12 - 2bb00ea 2017-05-22 Fixed Versions: = Git Commit ccc4232 Vulnerability Type: Remote Command Execution Vendor URL: https://pdnsmanager.lmitsystems.de/ Vendo...
EternalPetya and the lost Salsa20 key
We have recently been facing a huge outbreak of a new Petya-like malware armed with an infector similar to WannaCry. The research is still in progress, and the full report will be published soon. In this post, we will focus on some new important aspects of the current malware. The low-level attac...
Petya Is Not Ransomware, It's a 'Wiper'
The outbreak of the ExPetr malware isn’t a ransomware attack, but more precisely, it’s a wiper attack that sabotaged PCs globally, overwriting their Master Boot Record forever. That’s the analysis of security experts from Kaspersky Lab and Comae Technologies who shared their latest research on th...
Original Author of Petya Ransomware is Back & He Wants to Help NotPetya Victims
The author of original Petya ransomware is back. After 6 months of silence, the author of the now infamous Petya ransomware appeared today on Twitter to help victims unlock their files encrypted by a new version of Petya, also known as NotPetya. "We're back having a look in NotPetya," tweeted...
New Petya Distribution Vectors Bubbling to Surface
Join Kaspersky Lab and Comae Technologies Thursday June 29, 2017 at 10 a.m. Eastern time for a webinar “The Inside Story of the Petya/ExPetr Ransomware.” Click here to attend. While Microsoft and others continue to shore up links between yesterday’s global ransomware outbreak and the update...
Turns Out New Petya is Not a Ransomware, It’s a Destructive Wiper Malware
What if I say the Tuesday's devastating global malware outbreak was not due to any ransomware infection? Yes, the Petya ransomware attacks that began infecting computers in several countries, including Russia, Ukraine, France, India and the United States on Tuesday and demands $300 ransom was not...
Complex Petya-Like Ransomware Outbreak Worse than WannaCry
Join Kaspersky Lab and Comae Technologies Thursday June 29, 2017 at 10 a.m. Eastern time for a webinar “The Inside Story of the Petya/ExPetr Ransomware.” Click here to attend. The attackers behind today’s global ransomware outbreak are spreading the malware using a modified version of the leaked...
Multiple Petya Ransomware Infections Reported
US-CERT has received multiple reports of Petya ransomware infections in many countries around the world. Ransomware is a type of malicious software that infects a computer and restricts users' access to the infected machine until a ransom is paid to unlock it. Individuals and organizations are...
