Week Two of National Cyber Security Awareness Month

October is National Cyber Security Awareness Month, an annual campaign to raise awareness about cybersecurity. In partnership with DHS, the National Cyber Security Alliance has released information on “Cyber from the Break Room to the Board Room” describing how users can protect their businesses...

PT-2016-7901

Name of the Vulnerable Software and Affected Versions Mozilla Thunderbird versions prior to 45.4.0 Description The issue affects Mozilla Thunderbird when used in a browser-like context for rendering HTML emails or feeds, making it susceptible to vulnerabilities also present in Firefox ESR 45.4. T...

Turkey Blocks GitHub, Google Drive and Dropbox to Censor RedHack Leaks

Turkey is again in the news for banning online services, and this time, it's a bunch of sites and services offered by big technology giants. Turkey government has reportedly blocked access to cloud storage services including Microsoft OneDrive, Dropbox, and Google Drive, as well as the code hosti...

Threat Outbreak Alert RuleID25425: Email Messages Distributing Malicious Software on October 5, 2016

Medium Alert ID: 49195 First Published: 2016 October 5 17:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25425 may contain the following files: Name |...

Threat Outbreak Alert RuleID25436: Email Messages Distributing Malicious Software on October 5, 2016

Medium Alert ID: 49191 First Published: 2016 October 5 12:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25436 may contain the following files: Name |...

Microsoft Excel Files Containing Malicious Macro

Microsoft Excel files might contain a malicious macros. A remote attacker could send spam e-mails including those macros, and use social engineering in order to convince users to manually enable them. This would allow the malicious code to run and infect the target system...

Threat Outbreak Alert RuleID25295: Email Messages Distributing Malicious Software on September 27, 2016

Medium Alert ID: 49048 First Published: 2016 September 27 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25295 may contain the following files: Name ...

Sofacy APT Targeting OS X Machines with Komplex Trojan

The prolific APT gang allegedly behind the DNC hack and other targeted attacks against Western military and political targets is using a new Trojan called Komplex to infect OS X machines used in the aerospace industry. The gang, known as Sofacy, APT28, Fancy Bear, Sednit and Pawn Storm, is...

Threat Outbreak Alert RuleID25230: Email Messages Distributing Malicious Software on September 25, 2016

Medium Alert ID: 49031 First Published: 2016 September 26 14:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25230 may contain the following files: Name ...

Hancitor Downloader Abusing APIs, PowerShell Commands

Developers behind the malicious downloader Hancitor have bolstered the malware again, this time with new delivery approaches that make it more difficult to detect. The downloader is still spread through malicious attachments, and distributing malware designed to steal data, such as Pony and...

Hancitor (AKA Chanitor) observed using multiple attack approaches

Many threat actors use multiple attack vectors to ensure success. The individuals using Hancitor malware also known by the name Chanitor are no exception and have taken three approaches to deliver the malware in order to ultimately steal data from their victims. These techniques include uncommon...

Suspicious Metadata Mail Phishing Containing Attachment

Mail attachment containing a malicious downloader was observed as part of ransomware campaigns. A remote attacker could send spam e-mails including those downloaders and convince users to manually enable them. This would allow the malicious code to run and infect the target system...

Suspicious Microsoft Publisher Mail Attachment

Microsoft Office Publisher files might contain a malicious downloader. A remote attacker could send spam e-mails including those downloaders, and use social engineering in order to convince users to manually enable them. This would allow the malicious code to run and infect the target system...

Microsoft Office Information Disclosure Vulnerability

An information disclosure vulnerability exists when Microsoft Outlook fails to enforce copy/paste permissions on DRM-protected emails. An attacker who successfully exploited the vulnerability could potentially extract plaintext content from DRM-protected draft emails. The attacker would have to u...

Microsoft Word Document Malicious Known Downloaders

Microsoft Office files might contain malicious downloaders. A remote attacker could send spam e-mails including such downloaders, and use social engineering in order to convince users to manually enable them. This would allow the malicious code to run and infect the target system...

Threat Outbreak Alert RuleID24881: Email Messages Distributing Malicious Software on September 7, 2016

Medium Alert ID: 48799 First Published: 2016 September 7 13:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24881 may contain the following files: Name |...

Threat Outbreak Alert RuleID24619: Email Messages Distributing Malicious Software on August 25, 2016

Medium Alert ID: 48606 First Published: 2016 August 25 18:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24619 may contain the following files: Name |...

Paragon Initiative Enterprises: Email Spoofing With Your Website's Email

Hey Parogine, I have found Email Spoofing type of Vulnerability in your Website, E-Mail Spoofing Now the Question is, What is E-mail Spoofing: Email spoofing is the creation of email messages with a forged sender address. Because the core email protocols do not have any mechanism for...

Dutch, Belgian Ransomware Wildfire Disrupted, Decryption Keys Posted

The No More Ransom initiative released decryption keys for yet another strain of ransomware this week; now victims of the mostly Dutch-leaning ransomware called WildFire can get their files back without paying attackers. According to an update from the Dutch National Police on Wednesday, when it...

Ian Dunn: Send emails to all users using Camptix

Ian, This is my first stab at submitting a bug, and I'm not even sure it is one. Here's what I found. If an admin of a site using Camptix who is logged into the admin screen visits a malicious site which has access to a valid wpnonce value could send a large volume of spam to all ticket holders...