MAL-2023-2229 Malicious code in scrrapy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fe0e777e2bd3fd3ee1b90b52eb179d3eb4af81983a82dafb541fd901e4544025 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2080 Malicious code in pyinstlaler (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 330d0629bf5166afbd46269cce3efaa505dcaba7048dd0addbc29f3a834690e0 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beutifulsoup4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a74a36adea067d56842d1606f1bbeaa5d66d302d2c3d33a520d76b46ec81846b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2408 Malicious code in websokets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e8b6f01e8e4ba4dd4d17c1e52ce6ad43d998bbf82b8d5ffa2375d4756437803d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2472 Malicious code in yvper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 53b17fd4f9f0d8f72d214b72683b4e65516bd40b5f724d1e615f4c325629c0cb Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1713 Malicious code in cryptfoeed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5533ab552917d5c310d89e65b0a88a54a19429f6eea45abf9b7d606b7ce6bc93 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1842 Malicious code in freqtrae (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1708a789c030147e2c6d464a5d694826c3b742fbfde84df3a691971cb4ca36de Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2151 Malicious code in reqtrade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9eafd0ca4dd4d799f7fc2c72d39f61b3ea59fd355085c35889d3f640f62bb992 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

TAU Threat Intelligence Notification – Fake Movie File Attack Targeting Cryptocurrency

A malicious Windows shortcut file is posing as a movie available on a torrent site - its payload is used to conduct web-injection, ultimately targeting victim’s web searches in browsers like Chrome, Firefox and Internet Explorer. The payload has the ability to search for and steal cryptocurrency...

TrickBot Banking Trojan Adds New Browser Manipulation Tools

The TrickBot banking Trojan, a close relative to Dyre, has a growing target list and new browser manipulation techniques, experts at IBM X-Force said. “We expect to see it amplify infection campaigns and fraud attacks, sharpen its aim on business and corporate accounts,” wrote Limor Kessem,...

Try something new – Beat the BlueHat Challenge!

August 2014 Update: The BlueHat Challenge is on hold. We will make an announcement on this blog when we re-start the BlueHat Challenge. Thanks for your interest! --- We were inspired by the Matasano Crypto Challenges. So we built a similar series of fun challenges to exercise reverse engineering,...

FtpLocate - HTML Injection

FtpLocate - HTML Injection source: https://www.securityfocus.com/bid/60760/info FtpLocate is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the...

BlackHole RAT : Mac OS X backdoor Trojan !

'BlackHole' is the latest remote administration tool RAT and is available both in Windows and Mac. Hacktool such RAT employs client-server program that communicates to its victim's machine through its trojan server. The server application is installed on the victim while the client application is...

MOG-WebShop (index.php group) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ MOG-WebShop = ? - Multiple Remote SQL Injection Vulnerabilities Waktu : Dec 15 2007 11:45AM Software : MOG-WebShop | http://mog-site.com/index.php?act=product&po=detil&id=3...

MOG-WebShop (index.php group) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== MOG-WebShop index.php group Remote SQL Injection Exploit ========================================================== !/usr/bin/perl Indonesian Newhack Security Advisory...

Webace-Linkscript 1.3 SE (start.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Webace-Linkscript 1.3 SE start.php Remote SQL Injection Vulnerability ======================================================================= Webace-Linkscript V1.3...