TrickMo Banking Trojan Can Now Capture Android PINs and Unlock Patterns

New variants of an Android banking trojan called TrickMo have been found to harbor previously undocumented features to steal a device's unlock pattern or PIN. "This new addition enables the threat actor to operate on the device even while it is locked," Zimperium security researcher Aazim Yaswant...

PT-2024-31530 · Helmholz +1 · Rex100 +3

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The devices contain two hard-coded user accounts with hardcoded passwords, allowing an unauthenticated remote attacker to gain full control of the...

5 Must-Have Tools for Effective Dynamic Malware Analysis

Dynamic malware analysis is a key part of any threat investigation. It involves executing a sample of a malicious program in the isolated environment of a malware sandbox to monitor its behavior and gather actionable indicators. Effective analysis must be fast, in-depth, and precise. These five...

THN Cybersecurity Recap: Last Week's Top Threats and Trends (September 23-29)

Hold onto your hats, folks, because the cybersecurity world is anything but quiet! Last week, we dodged a bullet when we discovered vulnerabilities in CUPS that could've opened the door to remote attacks. Google's switch to Rust is paying off big time, slashing memory-related vulnerabilities in...

Hackers Could Remotely Control Kia Cars by Exploiting License Plates

A critical vulnerability in Kia vehicles allowed hackers to control cars remotely using only license plates. The flaw…...

Hackers Could Have Remotely Controlled Kia Cars Using Only License Plates

Cybersecurity researchers have disclosed a set of now patched vulnerabilities in Kia vehicles that, if successfully exploited, could have allowed remote control over key functions simply by using only a license plate. "These attacks could be executed remotely on any hardware-equipped vehicle in...

Malicious code in meditek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79ebeff786b44dfe1e4d9920b228a143335564879c286690455423f754824a88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Triangle Microworks TMW IEC 61850 安全漏洞

The SICAM 8 power automation platform is a universal, hardware and software based, all-in-one solution for all applications in the power sector. the SICAM A8000 RTUs Remote Terminal Units are modular devices for remote control and automation applications in all areas of energy supply. SICAM EGS...

CVE-2024-8779

The CVE-2024-8779 entry concerns OMFLOW by The SYSCOM Group, where access to system settings modification is not properly restricted. The vulnerability allows remote attackers with regular privileges to update system settings or create administrator accounts, potentially gaining full control of t...

Malicious code in 0g-storage-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 189712c4a0b96b9447f3a3e68e5883de6303d027035935681f2341e68eeccc3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vueoriu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e37d072267b4336c865f9892dd40672ccdaf4f2f336fc2fd304bd97f8eaed7c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/eum-tempora-distinctio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a5d4b1d168bf71f91f6262c1c46d9722df779c8dd61ca554a9e142dcae0b2b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Apple TV Image Remote Control

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apple TV Image Remote Control', 'Description' = %q This module will show an image on an AppleTV device for a period of time. Some AppleTV devices...

Chromecast YouTube Remote Control

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Chromecast YouTube Remote Control', 'Description' = %q This module acts as a simple remote control for Chromecast YouTube. Only the deprecated DI...

Amazon Fire TV YouTube Remote Control

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Amazon Fire TV YouTube Remote Control', 'Description' = %q This module acts as a simple remote control for the Amazon Fire TV's YouTube app. Test...

Apple TV Video Remote Control

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'uri' class MetasploitModule 'Apple TV Video Remote Control', 'Description' = %q This module plays a video on an AppleTV device. Note that AppleTV can be somewha...

Certification Vulnerabilities for Multiple SICAM Products Lacking Critical Functionality

The SICAM 8 power automation platform is a universal, integrated hardware and software-based solution for all applications in the power supply sector.The SICAM A8000 RTUs are modular devices for remote control and automation applications in all areas of energy supply.The SICAM EGS is the gateway ...

Siemens CPCI85 Central Processing和SICORE Base system 访问控制错误漏洞

The SICAM 8 power automation platform is a universal, integrated hardware and software-based solution for all applications in the power supply sector.The SICAM A8000 RTUs are modular devices for remote control and automation applications in all areas of energy supply.The SICAM EGS is the gateway ...

Malicious code in dimaspedia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c763b10d1c1518d7a1b83655aa43d38243278e71daad1953955c08b1b93d095 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Longse NVR Security Vulnerability

Longse NVR is a series of network video recorders from China-based Longse Technology Longse. A security vulnerability exists in the Longse NVR that stems from transmitting a user's login and password to a remote control service without the use of any encryption, allowing an attacker to eavesdrop ...