TopazTerminator

TopazTerminator F, un altro driver è stato bruciato.. Stavo tenendo per me il driver wsftprm.sys per un po' ; ma visto che qualcuno ha pubblicato un POC pubblico, lo rilascio. Sappiamo tutti che presto verrà aggiunto alla lista dei driver bloccati, quindi ecco la mia implementazione per lo stesso...

EUVD-2023-56944

Malicious code in bioql PyPI...

Code injection

The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill any Protected Process Light process via an IOCTL which will be named at a later time...

CVE-2023-52271

The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill any Protected Process Light process via an IOCTL which will be named at a later time...

Topaz Antifraud wsftprm.sys security vulnerability

Topaz Antifraud is a business application from Topaz, Inc. provides defined processes, integrations and customizable rules to optimize costs and provide a secure ecosystem for your business. A security vulnerability exists in Topaz Antifraud wsftprm.sys version 2.0.0.0, which stems from a...

CVE-2023-52271

The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill any Protected Process Light process via an IOCTL which will be named at a later time...

CVE-2023-52271

The CVE-2023-52271 entry concerns Topaz Antifraud wsftprm.sys kernel driver 2.0.0.0. Public materials confirm a vulnerability where low-privilege attackers can terminate any Protected Process Light process via an IOCTL, potentially disabling security products. Public PoCs/exploit code exist (e.g....

SolarWinds and its CISO accused of misleading investors before major cyberattack

The Securities and Exchange Commission SEC has announced charges against software company SolarWinds Corporation and its chief information security officer CISO, Timothy G. Brown, for “fraud and internal control failures relating to allegedly known cybersecurity risks and vulnerabilities.” In 202...

Sefnit Click-Fraud Malware Related to Mevade Tor Botnet

A malware family, likely developed by the same authors who built a massive botnet recently discovered on the Tor network, has been revived with a stealthy new click-fraud scam. Microsoft reports a rash of new click-fraud activity linked to the Sefnit malware, which was thought dead and buried as ...

Threat Outbreak Alert: Fake ADP Antifraud Secure Update Notification Email Messages on July 10, 2013.

Medium Alert ID: 30032 First Published: 2013 July 11 12:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an antifraud secure update from ADP for the recipient. The text in the email message attempts to convince the...