Massive AI investment scam network spans 15,500 domains

Researchers tracked a large AI‑themed investment scam campaign involving more than 15,000 domains. It uses cloaking and deepfakes to hide from security tools while targeting ordinary users. Criminals abused the Keitaro ad-tracking platform as part of a cloaking system so real victims see scam...

Malicious ISO File Used in Romance Scam Targeting German Speakers

Sublime Security reveals a cunning romance/adult-themed scam targeting German speakers, leveraging Keitaro TDS to deliver an AutoIT-based malware loader. Learn how this sophisticated campaign operates, its deceptive tactics, and the hidden payload...

WordPress Advanced Custom Fields plugin < 5.11 - Missing Authorization to Information Disclosure vulnerability

Missing Authorization to Information Disclosure vulnerability discovered by Keitaro Yamazaki in WordPress Plugin Advanced Custom Fields versions 5.11...

WordPress Advanced Custom Fields plugin < 5.11 - Missing Authorization to Information Disclosure vulnerability

Missing Authorization to Information Disclosure vulnerability discovered by Keitaro Yamazaki in WordPress Plugin Advanced Custom Fields versions 5.11...

WordPress Advanced Custom Fields plugin < 5.11 - Missing Authorization on Option Changes vulnerability

Missing Authorization on Option Changes vulnerability discovered by Keitaro Yamazaki in WordPress Plugin Advanced Custom Fields versions 5.11...

Malware distributor Storm-0324 facilitates ransomware access

The threat actor that Microsoft tracks as Storm-0324 is a financially motivated group known to gain initial access using email-based initial infection vectors and then hand off access to compromised networks to other threat actors. These handoffs frequently lead to ransomware deployment. Beginnin...

Malware exploit: Keitaro Tds

Keitaro TDS Type: Auth Bypass Author: Xylitol //////////\ / / / / - / / / / / / / /\ / / / / - / // / / / / / / / / // // ///////////////\nf! \/\\\\\\\/ C Y B E R C R i M E W H Q Keitaro TDS Auth bypass v6.x - v7.7.10 Discovered on.: 28/03/2014 Released on...: 31/10/2016 1 go to...

Keitaro TDS 6.x.x - 7.7.10 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications //////////\ / / / / - / / / / / / / /\ / / / / - / // / / / / / / / / // // ///////////////\nf! \/\\\\\\\/ C Y B E R C R i M E W H Q Keitaro TDS Auth bypass v6.x - v7.7.10 Discovered on.: 28/03/2014 Released on...: 31/10/2016...