CVE-2019-6120

An issue was discovered in NiceHash Miner before 2.0.3.0. A missing rate limit while adding a wallet via Email address allows remote attackers to submit a large number of email addresses to identify valid ones. By exploiting this vulnerability with CVE-2019-6122 Username Enumeration an adversary...

First Cyber Attack 'Mass Exploiting' BlueKeep RDP Flaw Spotted in the Wild

Cybersecurity researchers have spotted a new cyberattack that is believed to be the very first but an amateur attempt to weaponize the infamous BlueKeep RDP vulnerability in the wild to mass compromise vulnerable systems for cryptocurrency mining. In May this year, Microsoft released a patch for ...

Chinese Hackers Compromise Telecom Servers to Spy on SMS Messages

A group of Chinese hackers carrying out political espionage for Beijing has been found targeting telecommunications companies with a new piece of malware designed to spy on text messages sent or received by highly targeted individuals. Dubbed "MessageTap ," the backdoor malware is a 64-bit ELF da...

Malicious Package

Overview All versions of comander contains malicious code . The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. Upon require the package attempts to start a cryptocurrency miner using coin-hive. Recommendation Remove the package...

CVE-2016-10979

The fossura-tag-miner plugin before 1.1.5 for WordPress has XSS...

CVE-2016-10979

The fossura-tag-miner plugin before 1.1.5 for WordPress has XSS...

CVE-2016-10978

The fossura-tag-miner plugin before 1.1.5 for WordPress has CSRF...

CVE-2016-10978

The fossura-tag-miner plugin before 1.1.5 for WordPress has CSRF...

Cross site scripting

The fossura-tag-miner plugin before 1.1.5 for WordPress has XSS...

Cross site request forgery (csrf)

The fossura-tag-miner plugin before 1.1.5 for WordPress has CSRF...

CVE-2016-10979

The fossura-tag-miner plugin before 1.1.5 for WordPress has XSS...

CVE-2016-10979

The CVE-2016-10979 entry concerns the fossura-tag-miner WordPress plugin prior to version 1.1.5, which is vulnerable to Cross-Site Scripting (XSS). Root cause is an XSS flaw in the plugin that could affect site users; the vulnerability is documented across multiple sources (NVD, Red Hat and CVE l...

CVE-2016-10978

The fossura-tag-miner plugin before 1.1.5 for WordPress has CSRF...

CVE-2016-10978

CVE-2016-10978 affects the fossura-tag-miner WordPress plugin (pre-1.1.5). The connected documents consistently describe a CSRF vulnerability in this plugin. Public details confirm the affected product and vulnerability class, but do not provide further exploit vectors, affected platforms beyond ...

Cryptocurrency miners aren’t dead yet: Documenting the voracious but simple “Panda”

By Christopher Evans and David Liebenberg. Executive summary A new threat actor named "Panda" has generated thousands of dollars worth of the Monero cryptocurrency through the use of remote access tools RATs and illicit cryptocurrency-mining malware. This is far from the most sophisticated actor...

A week in security (August 12 – 18)

Last week on Malwarebytes Labs, we took a look at the potential pitfalls of facial recognition technology, looked at ways domestic abuse survivors can secure their data, and explored the education threat landscape. We also kicked off a series looking at the Hidden Bee infection chain, and put...

This Week in Security News: Unpatched Systems and Lateral Phishing

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about an attack against Elasticsearch that delivers backdoors as its payload. Additionally, read how cybercriminals are turning to...

GreenFlash Sundown exploit kit expands via large malvertising campaign

Exploit kit activity has been relatively quiet for some time, with the occasional malvertising campaign reminding us that drive-by downloads are still a threat. However, during the past few days we noticed a spike in our telemetry for what appeared to be a new exploit kit. Upon closer inspection ...

This Cryptomining Malware Launches Linux VMs On Windows and macOS

Cybersecurity researchers from at least two firms today unveiled details of a new strain of malware that targets Windows and macOS systems with a Linux-based cryptocurrency mining malware. It may sound strange, but it's true. Dubbed "LoudMiner " and also "Bird Miner, " the attack leverages...

LoudMiner Cryptominer Uses Linux Image and Virtual Machines

An unusual cryptocurrency miner, dubbed LoudMiner, is spreading via pirated copies of Virtual Studio Technology. It uses virtualization software to mine Monero on a Tiny Core Linux virtual machine – a unique approach, according to researchers. Virtual Studio Technology VST is an audio plug-in...