597 matches found
ARE YOU LEAVING YOUR SECURITY BACKDOOR OPEN?
Gartner predicts that enterprises will spend $96 Billion on cyber security this year, up 8% from their spend in 2017. That's a big chunk of change. To put it into context, that spend is in the same ballpark as the individual GDPs of Venezuela, Sri Lanka and Puerto Rico in 2018. Despite this,...
CannibalRAT targets Brazil
This post was authored by Warren Mercer and Vitor Ventura Introduction Talos has identified two different versions of a RAT, otherwise known as a remote access trojan, that has been written entirely in Python and is wrapped into a standalone executable. The RAT is impacting users of a Brazilian...
A week in security (December 11 – December 17)
Last week we explained what fast flux is and how it's being abused, we showed you all kinds of Bitcoin-related scams, presented a video recording of a tech support scammer trying to sell free software, and pointed out some free software to keep an eye on your Internet traffic. We also informed yo...
A state of constant uncertainty or uncertain constancy? Fast flux explained
Last August, WireX made headlines. For one thing, it was dubbed the first-known DDoS botnet that used the Android platform. For another, it used a technique that—for those who have been around in the industry for quite a while now—rung familiar in the ears: fast flux. In the context of...
flux-info.fr XSS vulnerability
Open Bug Bounty ID: OBB-363987 Description| Value ---|--- Affected Website:| flux-info.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...
Fast Flux Botnet: Research Results
Just like that, another Akamai Edge has come and gone. If you were able to join us this year, I hope you had a chance to stop by my presentation on Threat Intelligence Insights: An In-Depth Analysis of a Fast Flux Botnet. In short, Fast Flux is a DNS technique used by botnets to hide various type...
A week in security (October 9 – October 15)
Last week on the Labs blog, we talked about GDPR as part of our series in the National Cyber Security Awareness Month NCSAM. We also discussed a new method for phishing Apple ID passwords and the possible ramifications. We analyzed the malvertising chain due to a script that was found on popular...
Researchers Crack Furtim, SFG Malware Connection
New research is challenging what security researchers know about Furtim, a new malware strain that has been compared to Stuxnet because of its believed targeting of industrial controls in energy companies. According to security experts at Damballa, Furtim and the recently discovered SFG malware a...
flux-info.fr XSS vulnerability
Vulnerable URL: http://www.flux-info.fr/blog/searcharticle.php?item=&k2;=" XSS Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 384097 VIP website status:| ...
Malware Communication Analyzer: Malcom
Malcom is a tool designed to analyze a system’s network communication using graphical representations of network traffic, and cross-reference them with known malware sources. This comes handy when analyzing how certain malware species try to communicate with the outside world. Malcom can help you...
Angler Exploit Kit Uses Domain Shadowing technique to Evade Detection
The world’s infamous Angler Exploit Kit has become the most advanced, much more powerful and the best exploit kit available in the market, beating the infamous BlackHole exploit kit, with a host of exploits including zero-days and a new technique added to it. Angler Exploit Kit's newest technique...
Rovnix Variant Surfaces With New DGA
Researchers have unearthed a new version of the Rovnix malware that has a couple of additional features, including a new domain generation algorithm and a secure transmission channel for communicating with the command-and-control servers. Rovnix is a malware variant that often has been distribute...
Flux Player 3.1.0 iOS - Multiple Vulnerabilities
No description provided by source. Title: ====== Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload Vulnerability Date: ===== 2013-07-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1013 VL-ID: ===== 1013 Common Vulnerability Scoring System:...
Flux CMS <= 1.5.0 (loadsave.php) Remote Arbitrary File Overwrite Exploit
No description provided by source. ?php / ------------------------------------------------------------------------ Flux CMS = 1.5.0 loadsave.php Remote Arbitrary File Overwrite Exploit ------------------------------------------------------------------------ author...: EgiX mail.....:...
Kelihos P2P Botnet Leveraging Composite Blocking Lists
Kelihos, the peer-to-peer botnet with nine lives, keeps popping up with new capabilities that enable it to sustain itself and make money for its keepers by pushing spam, harvesting credentials and even stealing Bitcoins. According to a number of sources, Kelihos is now leveraging legitimate and...
Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload Vulnerability
Title: ====== Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload Vulnerability Date: ===== 2013-07-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1013 VL-ID: ===== 1013 Common Vulnerability Scoring System: ==================================== 7.5...
Flux Player 3.1.0 LFI / Shell Upload
Title: ====== Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload Vulnerability Date: ===== 2013-07-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1013 VL-ID: ===== 1013 Common Vulnerability Scoring System: ==================================== 7.5...
Flux Player 3.1.0 iOS - Multiple Vulnerabilities
Title: ====== Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload Vulnerability Date: ===== 2013-07-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1013 VL-ID: ===== 1013 Common Vulnerability Scoring System: ==================================== 7.5...
Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload
Document Title: =============== Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1013 Release Date: ============= 2013-07-15 Vulnerability Laboratory ID VL-ID:...
Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload
Document Title: =============== Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1013 Release Date: ============= 2013-07-15 Vulnerability Laboratory ID VL-ID:...