Threat Outbreak Alert RuleID31075: Email Messages Distributing Malicious Software on November 6, 2017

Medium Alert ID: 55777 First Published: 2017 November 6 14:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31075 may contain the following files: Name |...

Threat Outbreak Alert RuleID31165: Email Messages Distributing Malicious Software on November 1, 2017

Medium Alert ID: 55756 First Published: 2017 November 1 16:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31165 may contain the following files: Name |...

Threat Outbreak Alert RuleID31164: Email Messages Distributing Malicious Software on November 1, 2017

Medium Alert ID: 55755 First Published: 2017 November 1 16:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31164 may contain the following files: Name |...

Threat Outbreak Alert RuleID31158: Email Messages Distributing Malicious Software on October 31, 2017

Medium Alert ID: 55737 First Published: 2017 October 31 15:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31158 may contain the following files: Name |...

Threat Outbreak Alert RuleID31142: Email Messages Distributing Malicious Software on October 31, 2017

Medium Alert ID: 55732 First Published: 2017 October 31 11:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31142 may contain the following files: Name |...

Threat Outbreak Alert RuleID31138: Email Messages Distributing Malicious Software on October 30, 2017

Medium Alert ID: 55729 First Published: 2017 October 30 13:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31138 may contain the following files: Name |...

Threat Outbreak Alert RuleID31137: Email Messages Distributing Malicious Software on October 30, 2017

Medium Alert ID: 55728 First Published: 2017 October 30 13:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31137 may contain the following files: Name |...

Threat Outbreak Alert RuleID31133: Email Messages Distributing Malicious Software on October 27, 2017

Medium Alert ID: 55717 First Published: 2017 October 27 14:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31133 may contain the following files: Name |...

Threat Outbreak Alert RuleID30970: Email Messages Distributing Malicious Software on October 26, 2017

Medium Alert ID: 55693 First Published: 2017 October 26 11:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30970 may contain the following files: Name |...

Threat Outbreak Alert RuleID31095: Email Messages Distributing Malicious Software on October 25, 2017

Medium Alert ID: 55686 First Published: 2017 October 25 15:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31095 may contain the following files: Name |...

Threat Outbreak Alert RuleID30918: Email Messages Distributing Malicious Software on October 25, 2017

Medium Alert ID: 55679 First Published: 2017 October 25 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30918 may contain the following files: Name |...

Threat Outbreak Alert RuleID30897: Email Messages Distributing Malicious Software on October 24, 2017

Medium Alert ID: 55672 First Published: 2017 October 24 11:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30897 may contain the following files: Name |...

Threat Outbreak Alert RuleID31056: Email Messages Distributing Malicious Software on October 23, 2017

Medium Alert ID: 55666 First Published: 2017 October 23 13:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31056 may contain the following files: Name |...

Threat Outbreak Alert RuleID31054: Email Messages Distributing Malicious Software on October 23, 2017

Medium Alert ID: 55664 First Published: 2017 October 23 13:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31054 may contain the following files: Name |...

Threat Outbreak Alert RuleID31052: Email Messages Distributing Malicious Software on October 20, 2017

Medium Alert ID: 55657 First Published: 2017 October 20 14:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31052 may contain the following files: Name |...

Remote code execution

An active network attacker MiTM can achieve remote code execution on a machine that runs IKARUS Anti Virus 2.16.7. IKARUS AV for Windows uses cleartext HTTP for updates along with a CRC32 checksum and an update value for verification of the downloaded files. The attacker first forces the client t...

CVE-2017-15643

The CVE-2017-15643 entry concerns IKARUS Anti Virus for Windows 2.16.7. Multiple connected documents confirm an active attacker can achieve remote code execution via a MITM-capable update pathway: IKARUS AV uses cleartext HTTP for updates; an attacker can coerce the client into an update, then re...

Threat Outbreak Alert RuleID31011: Email Messages Distributing Malicious Software on October 19, 2017

Medium Alert ID: 55644 First Published: 2017 October 19 15:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31011 may contain the following files: Name |...

Threat Outbreak Alert RuleID31027: Email Messages Distributing Malicious Software on October 19, 2017

Medium Alert ID: 55647 First Published: 2017 October 19 14:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31027 may contain the following files: Name |...

Threat Outbreak Alert RuleID31012: Email Messages Distributing Malicious Software on October 19, 2017

Medium Alert ID: 55645 First Published: 2017 October 19 14:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31012 may contain the following files: Name |...