PT-2021-1821 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the WalletService of Windows operating systems. It allows an attacker to elevate their privileges. Recommendations: At the moment...

Vulnerabilities found in Microsoft Windows

Microsoft fixes multiple vulnerabilities in Windows. A malicious party could potentially exploit the vulnerabilities to: - cause a denial-of-service, - bypass security measures, - execute arbitrary code, - obtain elevated privileges, - gain access to sensitive data. Below is a summary of the...

A week in security (December 21- December 27)

Last week on Malwarebytes Labs we warned our readers about not so festive social media scams, how Emotet returned just in time for Christmas, we tried out some free online games your kids are playing and here’s what happened, and our VideoBytes episode talked about what penetration testing tools...

Hacker Dumps Crypto Wallet Customer Data; Active Attacks Follow

On Monday a hacker dumped sensitive data stolen earlier this year from the Ledger cryptocurrency wallet’s website. The data was put up for grabs on sites frequented by criminals. And in a twist that surprised no one, the data is now actively being exploited in phishing campaigns. Researchers at...

MGASA-2020-0458 Updated bitcoin packages fix security vulnerabilities

Multiple vulnerabilities have been discovered in Bitcoin. In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the user's wallet.dat file, including their privat...

The vulnerability of the Windows WalletService component of the Windows operating system allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Windows WalletService component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...

November 10, 2020—KB4586785 (OS Build 17134.1845) - EXPIRED

None None...

Copay Bitcoin Wallet Security Breach

Copay Bitcoin Wallet is a bitcoin wallet platform for desktop and mobile devices. A security vulnerability exists in the wallet private key storage in Copay Bitcoin Wallet versions 5.01 through 5.1.0. An attacker could exploit this vulnerability to obtain a user's private key...

Brave Android 1.16.68 Security Fixes

Fixed file-path for cookies as reported on HackerOne by kanytu. - Encrypted private wallet data preferences for Brave Rewards...

CVE-2020-26947: Uncontrolled Search Path Element

monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . directory in an embedded RPATH with a preference ahead of /usr/lib, which allows local users to gain privileges via a Trojan horse library in the current working directory...

GHSA-J8QR-RVCV-CRHV Malicious Package in electron-native-notify

All versions of electron-native-notify contain malicious code. The package was part of a targeted attack to steal cryptocurrency wallet seeds and upload them to a remote server, effectively giving attackers access to users wallets. Recommendation Remove the package from your environment and follo...

Malicious Package in electron-native-notify

All versions of electron-native-notify contain malicious code. The package was part of a targeted attack to steal cryptocurrency wallet seeds and upload them to a remote server, effectively giving attackers access to users wallets. Recommendation Remove the package from your environment and follo...

GHSA-MHXG-PR3J-V9GR Malicious Package in colne

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

Malicious Package in ecuvre

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

GHSA-PC7Q-C837-3WJQ Malicious Package in wallet-address-validtaor

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

Malicious Package in wallet-address-validtaor

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

Malicious Package in wallet-address-vaildator

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

The vulnerability of the WalletService service on Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the WalletService service for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

monero:cold-outputs_fuzz_tests: Crash in tools::wallet2::import_outputs

Project: https://github.com/monero-project/monero.git Detailed Report: https://oss-fuzz.com/testcase?key=5443075625975808 Project: monero Fuzzing Engine: libFuzzer Fuzz Target: cold-outputsfuzztests Job Type: libfuzzerasanmonero Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

PT-2020-3717 · Microsoft · Windows Walletservice +1

Name of the Vulnerable Software and Affected Versions: Windows WalletService affected versions not specified Description: The issue is related to the way the Windows WalletService handles objects in memory, allowing for an elevation of privilege. A locally authenticated attacker could exploit thi...