10 matches found
r77-rootkit
r77 Rootkit 无文件 ring 3 Rootkit r77 是一个 ring 3 的 Rootkit，可以隐藏一切： 文件、目录 进程及 CPU/GPU 使用率 注册表键和值 服务 TCP 和 UDP 连接 交接点、命名管道、计划任务 通过前缀隐藏 所有以 "$77" 开头的内容都会被隐藏。 配置系统 动态配置系统允许根据 PID 和 名称 隐藏进程，根据 完整路径 隐藏文件系统项，隐藏特定端口的 TCP 和 UDP 连接等。 配置位于 HKEYLOCALMACHINE\SOFTWARE$77config，任何进程无需提升权限即可写入。该键的 DACL...
OBSCURE#BAT Malware Uses Fake CAPTCHA Pages to Deploy Rootkit r77 and Evade Detection
A new malware campaign has been observed leveraging social engineering tactics to deliver an open-source rootkit called r77. The activity, condemned OBSCUREBAT by Securonix, enables threat actors to establish persistence and evade detection on compromised systems. It's currently not known who is...
NPM Typosquatting Attack Deploys r77 Rootkit via Legitimate Package
By Deeba Ahmed Another day, another NPM typosquatting attack. This is a post from HackRead.com Read the original post: NPM Typosquatting Attack Deploys r77 Rootkit via Legitimate Package...
Rogue npm Package Deploys Open-Source Rootkit in New Supply Chain Attack
A new deceptive package hidden within the npm package registry has been uncovered deploying an open-source rootkit called r77, marking the first time a rogue package has delivered rootkit functionality. The package in question is node-hide-console-windows, which mimics the legitimate npm package...
CVE-2014-8952
Multiple unspecified vulnerabilities in Check Point Security Gateway R75.40VS, R75.45, R75.46, R75.47, R76, R77, and R77.10, when the 1 IPS blade, 2 IPsec Remote Access, 3 Mobile Access / SSL VPN blade, 4 SSL Network Extender, 5 Identify Awareness blade, 6 HTTPS Inspection, 7 UserCheck, or 8 Data...
CVE-2014-8951
Technical details (affected product, component, root cause, versions, or remediation) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2014-8950
Unspecified vulnerability in Check Point Security Gateway R77 and R77.10, when the 1 URL Filtering or 2 Identity Awareness blade is used, allows remote attackers to cause a denial of service crash via vectors involving an HTTPS request...
CVE-2014-8950
The CVE-2014-8950 entry concerns Check Point Security Gateway versions R77 and R77.10. The vulnerability affects the URL Filtering and Identity Awareness blades, where an HTTPS request can trigger a denial-of-service (crash). The available documents confirm the affected product and blades, and th...
CVE-2014-8950: Undefined Security Weakness
Unspecified vulnerability in Check Point Security Gateway R77 and R77.10, when the 1 URL Filtering or 2 Identity Awareness blade is used, allows remote attackers to cause a denial of service crash via vectors involving an HTTPS request...
