CVE-2023-2703

creationtimestamp| type| source ---|---|--- 2023-05-24 00:40:34+00:00| seen| https://t.me/cibsecurity/64659 2025-01-17 16:57:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2164...

CVE-2023-0192

creationtimestamp| type| source ---|---|--- 2023-04-01 12:22:57+00:00| seen| https://t.me/cibsecurity/61296...

CVE-2023-20988

creationtimestamp| type| source ---|---|--- 2023-03-24 23:50:48+00:00| seen| https://t.me/cibsecurity/60708 2025-02-25 21:27:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5388...

CVE-2022-32521

creationtimestamp| type| source ---|---|--- 2023-01-31 02:42:50+00:00| seen| https://t.me/cibsecurity/57181...

Robin Banks Phishing Service for Cybercriminals Returns with Russian Server

A phishing-as-a-service PhaaS platform known as Robin Banks has relocated its attack infrastructure to DDoS-Guard, a Russian provider of bulletproof hosting services. The switch comes after "Cloudflare disassociated Robin Banks phishing infrastructure from its services, causing a multi-day...

CVE-2022-3052

creationtimestamp| type| source ---|---|--- 2022-09-26 20:23:04+00:00| seen| https://t.me/cibsecurity/50513...

How 1-Time Passcodes Became a Corporate Liability

Phishers are enjoying remarkable success using text messages to steal remote access credentials and one-time passcodes from employees at some of the worlds largest technology companies and customer support firms. A recent spate of SMS phishing attacks from one cybercriminal group has spawned a...

CVE-2022-36503

creationtimestamp| type| source ---|---|--- 2022-08-25 18:30:12+00:00| seen| https://t.me/cibsecurity/48748...

CVE-2022-36967

creationtimestamp| type| source ---|---|--- 2022-08-03 02:18:10+00:00| seen| https://t.me/cibsecurity/47451...

Plaintext Storage of a Password in Jenkins Build Notifications Plugin

Build Notifications Plugin 1.5.0 and earlier stores multiple tokens unencrypted in its global configuration files on the Jenkins controller as part of its configuration:- Pushover Application Token in tools.devnull.jenkins.plugins.buildnotifications.PushoverNotifier.xml\n- Slack Bot Token in...

Sysrv-K Botnet Targets Windows, Linux

Unpatched vulnerabilities in the Spring Framework and WordPress plugins are being exploited by cybercriminals behind the Sysrv botnet to target Linux and Windows systems. The goal, according to researchers, is to infect systems with cryptomining malware. The botnet variant is being called Sysrv-K...

New Sysrv Botnet Variant Hijacking Windows and Linux with Crypto Miners

Microsoft is warning of a new variant of the Sysrv botnet that's exploiting multiple security flaws in web applications and databases to install coin miners on both Windows and Linux systems. The tech giant, which has called the new version Sysrv-K, is said to weaponize an array of exploits to ga...

Researchers Warn of "Eternity Project" Malware Service Being Sold via Telegram

An unidentified threat actor has been linked to an actively in-development malware toolkit called the "Eternity Project" that lets professional and amateur cybercriminals buy stealers, clippers, worms, miners, ransomware, and a distributed denial-of-service DDoS bot. What makes this...

A Telegram Bot Told Iranian Hackers When They Got a Hit

APT35 may not be the most dangerous group out there, but they've got a new phishing trick...

CVE-2021-31847

creationtimestamp| type| source ---|---|--- 2021-09-22 18:28:58+00:00| seen| https://t.me/cibsecurity/29233...

CVE-2021-34745

creationtimestamp| type| source ---|---|--- 2021-08-19 00:17:05+00:00| seen| https://t.me/cibsecurity/27568...

CVE-2021-24368

creationtimestamp| type| source ---|---|--- 2021-06-20 16:14:05+00:00| seen| https://t.me/cibsecurity/25567 2021-06-20 20:18:25+00:00| published-proof-of-concept| Telegram/SwiSobMQG0GgXZb6s2bONShglSmuoC6uAWdnf6cGc-Cg...

Cybercriminals Using Telegram Messenger to Control ToxicEye Malware

Adversaries are increasingly abusing Telegram as a "command-and-control" system to distribute malware into organizations that could then be used to capture sensitive information from targeted systems. "Even when Telegram is not installed or being used, the system allows hackers to send malicious...

Telegram C# C2 - A Command and Control Tool for Telegram Bot Communication

Command and Control for C Writing Author: Leiothrix Telegram: @Leiothrix Twitter: @wh4am1 Team: QQ愛&Love Install Nuget download these package using System.IO; using Telegram.Bot; using Telegram.Bot.Args; using Telegram.Bot.Types.InputFiles; using AForge.Video; using AForge.Controls; using...

Telebix - An Application That Communicates With A Bot On The Telegram To Receive Commands And Send Information From An Infrastructure Monitored By Zabbix

Telebix is an application that communicates with a Bot on the Telegram to receive commands and send information from an infrastructure monitored by Zabbix, which also sends messages in real time if any problems occur in the infrastructure, it is totally written in Python with Shell Script and has...