Blind Eagle Hackers Return with Refined Tools and Sophisticated Infection Chain

A financially motivated threat actor tracked as Blind Eagle has resurfaced with a refined toolset and an elaborate infection chain as part of its attacks targeting organizations in Colombia and Ecuador. Check Point's latest research offers new insights into the Spanish-speaking group's tactics an...

New Android Banking Trojan 'Revive' Targeting Users of Spanish Financial Services

A previously unknown Android banking trojan has been discovered in the wild, targeting users of the Spanish financial services company BBVA. Said to be in its early stages of development, the malware — dubbed Revive by Italian cybersecurity firm Cleafy — was first observed on June 15, 2022 and...

APICheck - The DevSecOps Toolset For REST APIs

APICheck is a complete toolset designed and created for testing REST APIs. Why APICheck APICheck focuses not only in the security testing and hacking use cases. The goal of the project is to become a complete toolset for DevSecOps cycles. The tools are aimed to diverse users profiles: Developers...

bbva.es XSS vulnerability

Vulnerable URL: https://www.bbva.es/productos/buscador.jsp?q=help%22%3Ealert1%3E%3C1%3E%3Cimg%20src=x%20onerror=%22alert%27OPENBUGBOUNTY%27%22%3E Details: Description| Value ---|--- Patched:| Yes, at 12.09.2017 Latest check for patch:| 12.09.2017 11:05 GMT Vulnerability type:| XSS Vulnerability...

bbva.com XSS vulnerability

Vulnerable URL:...

bbva.trabajando.cl XSS vulnerability

Vulnerable URL: http://bbva.trabajando.cl/sendjob?oferta=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

bbva.es XSS vulnerability

Vulnerable URL: http://www.bbva.es/general/localizador-oficinas/ubicacion-mapa.jsp?lat=43.242268=-2.9253712=P";alert'XSSPOSED';a=" Details: Description| Value ---|--- Patched:| Yes, at 07.04.2017 Latest check for patch:| 07.04.2017 12:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...