3807 matches found
HUMINT: Diving Deep into the Dark Web
Discover how cybercriminals behave in Dark Web forums- what services they buy and sell, what motivates them, and even how they scam each other. Clear Web vs. Deep Web vs. Dark Web Threat intelligence professionals divide the internet into three main components: Clear Web - Web assets that can be...
Experts Warn of Mekotio Banking Trojan Targeting Latin American Countries
Financial institutions in Latin America are being threatened by a banking trojan called Mekotio aka Melcoz. That's according to findings from Trend Micro, which said it recently observed a surge in cyber attacks distributing the Windows malware. Mekotio, known to be actively put to use since 2015...
Malicious code in fake-package-agpl-license (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 53470e96107ebc806b1a440821244a335389aca112b5752ce995ae87150b0b4d The OpenSSF Package Analysis project identified 'fake-package-agpl-license' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
MAL-2024-7425 Malicious code in fake-package-apache-with-copyleft-dep (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dccffa1d5f84a8476d98fd5eed5c0401aba753ef0916b506d1b8f9687029351d The OpenSSF Package Analysis project identified 'fake-package-apache-with-copyleft-dep' @ 4.0.0 npm as malicious. It is considered malicious...
Malicious code in @fake-registry/b (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 47be0b354748c2d14abc42bdd335e4da22324a65c300d85b0fe522705c8e0661 The OpenSSF Package Analysis project identified '@fake-registry/b' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-7420 Malicious code in @fake-registry/b (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 47be0b354748c2d14abc42bdd335e4da22324a65c300d85b0fe522705c8e0661 The OpenSSF Package Analysis project identified '@fake-registry/b' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in @fake-registry/a (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97c876bbfb1684701b8dc4481892093cd4c86a3dc718debe40811786e4175f57 The OpenSSF Package Analysis project identified '@fake-registry/a' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-7419 Malicious code in @fake-registry/a (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97c876bbfb1684701b8dc4481892093cd4c86a3dc718debe40811786e4175f57 The OpenSSF Package Analysis project identified '@fake-registry/a' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...
CVE-2024-39840
Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects...
CVE-2024-39840
Factorio before 1.1.101 is affected. A crafted server map can trigger arbitrary code execution on clients by abusing certain Lua base module functions to execute bytecode and create fake objects. Affected component: Factorio server/client interaction via custom maps; root cause: Lua base module f...
ICO Scams Leverage 2024 Olympics to Lure Victims, Use AI for Fake Sites
In this blog we uncover threat actors using the 2024 Olympics to lure victims into investing in an initial coin offering ICO. Similar schemes have been found to use AI-generated images for their fake ICO websites...
Neiman Marcus confirms breach. Is the customer data already for sale?
Luxury retail chain Neiman Marcus has begun to inform customers about a cyberattack it discovered in May. The attacker compromised a database platform storing customers personal information. The letter tells customers: “Promptly after learning of the issue, we took steps to contain it, including ...
MAL-2024-3196 Malicious code in tricks_unlimited_fa_ke_bit_coin_trans_action_generator_freee_unlimited_y6u6 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3195 Malicious code in tricks_unlimited_fa_ke_bit_coin_trans_action_generator_freee_unlimited_y45y65 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3193 Malicious code in tricks_unlimited_fa_ke_bit_coin_trans_action_generator_freee_unlimited_vvdg3vqz2 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3192 Malicious code in tricks_unlimited_fa_ke_bit_coin_trans_action_generator_freee_unlimited_vvdg3vqz (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3190 Malicious code in tricks_unlimited_fa_ke_bit_coin_trans_action_generator_freee_unlimited_vvdg3vqasw2 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3191 Malicious code in tricks_unlimited_fa_ke_bit_coin_trans_action_generator_freee_unlimited_vvdg3vqdf4 (npm)
--- -= Per source details. Do not edit below this line.=-...