Lucene search
+L

1194 matches found

The Hacker News
The Hacker News
added 2023/02/08 3:0 p.m.27 views

Sydney Man Sentenced for Blackmailing Optus Customers After Data Breach

A Sydney man has been sentenced to an 18-month Community Correction Order CCO and 100 hours of community service for attempting to take advantage of the Optus data breach last year to blackmail its customers. The unnamed individual, 19 when arrested in October 2022 and now 20, used the leaked...

1AI score
SaveExploits0
Trend Micro Simply Security
Trend Micro Simply Security
added 2023/02/08 12:0 a.m.150 views

Earth Zhulong: Familiar Patterns Target Vietnam

In 2022, we discovered Earth Zhulong, a hacking group that has been targeting Vietnam's telecom, technology, and media sectors similar to another well-known threat actor. In this article, we unravel their new tactics, techniques and procedures that they apply on their misdeeds...

3.2AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/01/11 5:35 p.m.111 views

New Analysis Reveals Raspberry Robin Can be Repurposed by Other Threat Actors

A new analysis of Raspberry Robin's attack infrastructure has revealed that it's possible for other threat actors to repurpose the infections for their own malicious activities, making it an even more potent threat. Raspberry Robin aka QNAP worm, attributed to a threat actor dubbed DEV-0856, is a...

7.1AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/01/05 12:34 p.m.25 views

Bluebottle Cybercrime Group Preys on Financial Sector in French-Speaking African Nations

A cybercrime group dubbed Bluebottle has been linked to a set of targeted attacks against the financial sector in Francophone countries located in Africa from at least July 2022 to September 2022. "The group makes extensive use of living-off-the-land, dual use tools, and commodity malware, with n...

1.1AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/01/03 10:13 a.m.23 views

Raspberry Robin Worm Evolves to Attack Financial and Insurance Sectors in Europe

Financial and insurance sectors in Europe have been targeted by the Raspberry Robin worm, as the malware continues to evolve its post-exploitation capabilities while remaining under the radar. "What is unique about the malware is that it is heavily obfuscated and highly complex to statically...

1.9AI score
SaveExploits0
The Hacker News
The Hacker News
added 2022/12/21 12:23 p.m.61 views

Raspberry Robin Worm Strikes Again, Targeting Telecom and Government Systems

The Raspberry Robin worm has been used in attacks against telecommunications and government office systems across Latin America, Australia, and Europe since at least September 2022. "The main payload itself is packed with more than 10 layers for obfuscation and is capable of delivering a fake...

0.7AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2022/12/21 12:9 p.m.12 views

Ukraine Intercepting Russian Soldiers’ Cell Phone Calls

Theyre using commercial phones, which go through the Ukrainian telecom network: "You still have a lot of soldiers bringing cellphones to the frontline who want to talk to their families and they are either being intercepted as they go through a Ukrainian telecommunications provider or intercepted...

1AI score
SaveExploits0
Trend Micro Simply Security
Trend Micro Simply Security
added 2022/12/20 12:0 a.m.18 views

Raspberry Robin Malware Targets Telecom, Governments

We found samples of the Raspberry Robin malware spreading in telecommunications and government office systems beginning September. The main payload itself is packed with more than 10 layers for obfuscation and is capable of delivering a fake payload once it detects sandboxing and security analyti...

3.3AI score
SaveExploits0
NVD
NVD
added 2022/12/16 4:15 p.m.17 views

CVE-2022-20531

In Telecom, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS0.0013EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/12/16 4:15 p.m.7 views

CVE-2022-20531

In Telecom, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.1AI score0.0013EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/12/16 4:15 p.m.20 views

Information disclosure

In Telecom, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

1.7CVSS6.3AI score0.0013EPSS
SaveExploits0References1
HackRead
HackRead
added 2022/12/16 2:3 a.m.33 views

Hackers Breach TPG Telecoms’ Email Host to Steal Client Data

By Habiba Rashid The TGP telecom giant based in North Ryde, Australia revealed that up to 15,000 iiNet and Westnet business customers have been impacted by the breach. This is a post from HackRead.com Read the original post: Hackers Breach TPG Telecoms Email Host to Steal Client Data...

2.5AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/12/16 12:0 a.m.8 views

PT-2022-14746 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to side channel information disclosure in Telecom, allowing an attacker to determine whether an app is installed without query permissions. This could lead to local...

5.5CVSS5.2AI score0.0013EPSS
SaveExploits0References4
HackRead
HackRead
added 2022/12/08 6:18 p.m.16 views

The Onyx Fms: Monitor And Prevent Telecom Fraud In Real-time

By Owais Sultan Telco fraud, telecom fraud, telecommunications fraud – regardless of the name used, it refers to one thing that… This is a post from HackRead.com Read the original post: The Onyx Fms: Monitor And Prevent Telecom Fraud In Real-time...

3.6AI score
SaveExploits0
NVD
NVD
added 2022/12/08 4:15 p.m.43 views

CVE-2022-39905

Implicit intent hijacking vulnerability in Telecom application prior to SMR Dec-2022 Release 1 allows attacker to access sensitive information via implicit intent...

5.5CVSS0.00114EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/08 4:15 p.m.9 views

CVE-2022-39905

Implicit intent hijacking vulnerability in Telecom application prior to SMR Dec-2022 Release 1 allows attacker to access sensitive information via implicit intent...

5.5CVSS5.8AI score0.00114EPSS
SaveExploits0References1
Prion
Prion
added 2022/12/08 4:15 p.m.19 views

Information disclosure

Implicit intent hijacking vulnerability in Telecom application prior to SMR Dec-2022 Release 1 allows attacker to access sensitive information via implicit intent...

1.7CVSS5.3AI score0.00114EPSS
SaveExploits0References1Affected Software1
hivepro
hivepro
added 2022/12/08 7:20 a.m.64 views

BackdoorDiplomacy targets the telecom industry in the Middle East

Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary BackdoorDiplomacy, an advanced persistent threat APT gang with roots in China, is most likely behind a hostile campaign targeting the Middle East. The espionage action, aimed at a Middle Eastern telecom...

7.5CVSS0.9AI score0.99999EPSS
SaveExploits65
CVE
CVE
added 2022/12/08 12:0 a.m.63 views

CVE-2022-39905

CVE-2022-39905 is an implicit intent hijacking vulnerability in the Samsung Telecom application prior to the SMR-DEC-2022 Release 1. The fault is a misused implicit intent that allows an attacker to access sensitive information via intents, with impact described as confidential data exposure and ...

5.5CVSS5.2AI score0.00114EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/12/08 12:0 a.m.56 views

CVE-2022-39905

Implicit intent hijacking vulnerability in Telecom application prior to SMR Dec-2022 Release 1 allows attacker to access sensitive information via implicit intent...

4CVSS5.5AI score0.00114EPSS
SaveExploits0References1
Rows per page
Query Builder