532 matches found
Fast Flux Botnet: Research Results
Just like that, another Akamai Edge has come and gone. If you were able to join us this year, I hope you had a chance to stop by my presentation on Threat Intelligence Insights: An In-Depth Analysis of a Fast Flux Botnet. In short, Fast Flux is a DNS technique used by botnets to hide various type...
A week in security (October 9 – October 15)
Last week on the Labs blog, we talked about GDPR as part of our series in the National Cyber Security Awareness Month NCSAM. We also discussed a new method for phishing Apple ID passwords and the possible ramifications. We analyzed the malvertising chain due to a script that was found on popular...
Researchers Crack Furtim, SFG Malware Connection
New research is challenging what security researchers know about Furtim, a new malware strain that has been compared to Stuxnet because of its believed targeting of industrial controls in energy companies. According to security experts at Damballa, Furtim and the recently discovered SFG malware a...
flux-info.fr XSS vulnerability
Vulnerable URL: http://www.flux-info.fr/blog/searcharticle.php?item=&k2;=" XSS Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 384097 VIP website status:| ...
Malware Communication Analyzer: Malcom
Malcom is a tool designed to analyze a system’s network communication using graphical representations of network traffic, and cross-reference them with known malware sources. This comes handy when analyzing how certain malware species try to communicate with the outside world. Malcom can help you...
Angler Exploit Kit Uses Domain Shadowing technique to Evade Detection
The world’s infamous Angler Exploit Kit has become the most advanced, much more powerful and the best exploit kit available in the market, beating the infamous BlackHole exploit kit, with a host of exploits including zero-days and a new technique added to it. Angler Exploit Kit's newest technique...
Rovnix Variant Surfaces With New DGA
Researchers have unearthed a new version of the Rovnix malware that has a couple of additional features, including a new domain generation algorithm and a secure transmission channel for communicating with the command-and-control servers. Rovnix is a malware variant that often has been distribute...
Flux CMS <= 1.5.0 (loadsave.php) Remote Arbitrary File Overwrite Exploit
No description provided by source. ?php / ------------------------------------------------------------------------ Flux CMS = 1.5.0 loadsave.php Remote Arbitrary File Overwrite Exploit ------------------------------------------------------------------------ author...: EgiX mail.....:...
Flux Player 3.1.0 iOS - Multiple Vulnerabilities
No description provided by source. Title: ====== Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload Vulnerability Date: ===== 2013-07-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1013 VL-ID: ===== 1013 Common Vulnerability Scoring System:...
Kelihos P2P Botnet Leveraging Composite Blocking Lists
Kelihos, the peer-to-peer botnet with nine lives, keeps popping up with new capabilities that enable it to sustain itself and make money for its keepers by pushing spam, harvesting credentials and even stealing Bitcoins. According to a number of sources, Kelihos is now leveraging legitimate and...
[Malcom] Malware Communication Analyzer
Malcom is a tool designed to analyze a system's network communication using graphical representations of network traffic. This comes handy when analyzing how certain malware species try to communicate with the outside world. Malcom can help you: detect central command and control C&C servers...
Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload Vulnerability
Title: ====== Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload Vulnerability Date: ===== 2013-07-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1013 VL-ID: ===== 1013 Common Vulnerability Scoring System: ==================================== 7.5...
Flux Player 3.1.0 iOS - Multiple Vulnerabilities
Title: ====== Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload Vulnerability Date: ===== 2013-07-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1013 VL-ID: ===== 1013 Common Vulnerability Scoring System: ==================================== 7.5...
Flux Player 3.1.0 LFI / Shell Upload
Title: ====== Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload Vulnerability Date: ===== 2013-07-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1013 VL-ID: ===== 1013 Common Vulnerability Scoring System: ==================================== 7.5...
Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload
Document Title: =============== Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1013 Release Date: ============= 2013-07-15 Vulnerability Laboratory ID VL-ID:...
Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload
Document Title: =============== Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1013 Release Date: ============= 2013-07-15 Vulnerability Laboratory ID VL-ID:...
Peer-to-Peer Botnet Takedowns a Challenge
The FBI, Justice Department and technology companies have had success shutting down botnets that rely on a centralized infrastructure and command and control servers to communicate with bots, steal data or send malicious commands. Peer-to-peer botnets, however, have proven more difficult to take...
New Version of Kelihos Botnet Appears
Researchers are tracking a new version of the Kelihos botnet, one that comes complete with better resistance to sinkholing techniques and a feature that enables it to remain dormant on infected machines for long periods to help avoid detection. The botnet also is using an advanced fast-flux...
Researchers Discovery Data-Stealing Malware That Likes to Nap
Researchers at FireEye’s Malware Intelligence Lab say they’ve found malware that attempts to evade detection with extended sleep calls and uses “the fast flux technique” to hide the attacker’s identity. They are calling the malicious downloader “Trojan Nap” and notes it uses a technique akin to t...
New Malware Can't Be Caught Napping
The aptly named Trojan Nap, a stealthy type of malware recently discovered by researchers at FireEye is able to evade detection methods by tricking scanners into thinking it’s asleep. This is according to researchers Abhishek Singh and Ali Islam with the California-based security firm who wrote o...