96 matches found
Agent Racoon Backdoor Targets Organizations in Middle East, Africa, and U.S.
Organizations in the Middle East, Africa, and the U.S. have been targeted by an unknown threat actor to distribute a new backdoor called Agent Racoon. "This malware family is written using the .NET framework and leverages the domain name service DNS protocol to create a covert channel and provide...
Chimera - Automated DLL Sideloading Tool With EDR Evasion Capabilities
While DLL sideloading can be used for legitimate purposes, such as loading necessary libraries for a program to function, it can also be used for malicious purposes. Attackers can use DLL sideloading to execute arbitrary code on a target system, often by exploiting vulnerabilities in legitimate...
MULTI#STORM Campaign Targets India and U.S. with Remote Access Trojans
A new phishing campaign codenamed MULTISTORM has set its sights on India and the U.S. by leveraging JavaScript files to deliver remote access trojans on compromised systems. "The attack chain ends with the victim machine infected with multiple unique RAT remote access trojan malware instances, su...
Stealthy DBatLoader Malware Loader Spreading Remcos RAT and Formbook in Europe
A new phishing campaign has set its sights on European entities to distribute Remcos RAT and Formbook via a malware loader dubbed DBatLoader. "The malware payload is distributed through WordPress websites that have authorized SSL certificates, which is a common tactic used by threat actors to eva...
New 'Bad Magic' Cyber Threat Disrupt Ukraine's Key Sectors Amid War
Amid the ongoing war between Russia and Ukraine, government, agriculture, and transportation organizations located in Donetsk, Lugansk, and Crimea have been attacked as part of an active campaign that drops a previously unseen, modular framework dubbed CommonMagic. "Although the initial vector of...
Microsoft OneDrive Installed (macOS)
Binary data macosonedriveinstalled.nbin...
Microsoft OneDrive for MacOS < 23.043.0226 Privilege Escalation
The version of Microsoft OneDrive for MacOS on the remote macOS / Mac OS X host is prior to 23.043.0226. It is, therefore affected by an escalation of privilege vulnerability. An authenticated, local attacker can elevate to SYSTEM privileges. Note that Nessus has not tested for these issues but h...
CVE-2023-24923
Microsoft OneDrive for Android Information Disclosure Vulnerability...
CVE-2023-24930
Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability...
CVE-2023-24882
Microsoft OneDrive for Android Information Disclosure Vulnerability...
CVE-2023-24890
Microsoft OneDrive for iOS Security Feature Bypass Vulnerability...
Information disclosure
Microsoft OneDrive for Android Information Disclosure Vulnerability...
Information disclosure
Microsoft OneDrive for Android Information Disclosure Vulnerability...
CVE-2023-24890 Microsoft OneDrive for iOS Security Feature Bypass Vulnerability
...
CVE-2023-24930 Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability
...
CVE-2023-24882 Microsoft OneDrive for Android Information Disclosure Vulnerability
...
CVE-2023-24923 Microsoft OneDrive for Android Information Disclosure Vulnerability
...
CVE-2023-24882 Microsoft OneDrive for Android Information Disclosure Vulnerability
...
