Operation “Armor Piercer:” Targeted attacks in the Indian subcontinent using commercial RATs

By Asheer Malhotra, Vanja Svajcer and Justin Thattil. Cisco Talos is tracking a campaign targeting government personnel in India using themes and tactics similar to APT36 aka Mythic Leopard and Transparent Tribe.This campaign distributes malicious documents and archives to deliver the Netwire...

Transparent Tribe APT expands its Windows malware arsenal

By Asheer Malhotra, Justin Thattil and Kendall McKay. Transparent Tribe, also known as APT36 and Mythic Leopard, continues to create fake domains mimicking legitimate military and defense organizations as a core component of their operations. Cisco Talos' previous research has mainly linked this...

Transparent Tribe: Evolution analysis, part 2

Background + Key findings Transparent Tribe, also known as PROJECTM or MYTHIC LEOPARD, is a highly prolific group whose activities can be traced as far back as 2013. In the last four years, this APT group has never taken time off. They continue to hit their targets, which typically are Indian...

Transparent Tribe: Evolution analysis,part 1

Background and key findings Transparent Tribe, also known as PROJECTM and MYTHIC LEOPARD, is a highly prolific group whose activities can be traced as far back as 2013. Proofpoint published a very good article about them in 2016, and since that day, we have kept an eye on the group. We have...

猎豹免费WiFi本地权限提升漏洞

No description provided by source...

Cisco 2900 Series Integrated Services Router Denial of Service Vulnerability

The Cisco 2900 Series Integrated Services Router is a network router device. A vulnerability in the Cisco 2900 Series Integrated Services Router's handling of the NBAR protocol lock allows an attacker to send a specially crafted IPv4 leopard pattern that can cause the router to reboot...

Safari SVGPathSegList Use-After-Free Exploit

Remote command execution exploit works on Windows XP/Vista/7 and MacOSX Snow Leopard. This is private exploit. You can buy it at https://0day.today...

UFO: Alien Invasion 2.2.1 - IRC Client Remote Code Execution - OSX Snow Leopard (ROP)

No description provided by source. !/usr/bin/python UFO: Alien Invasion v2.2.1 IRC Client Remote Code Execution - MacOSX OS X Snow Leopard: d1dn0t OS X Leopard: dookie Windows PoC: Jason Geffner http://www.exploit-db.com/exploits/14013 import sys, socket, struct WRITEABLE = 0x8fe66448...

Apple Fixes Flaws, Updates Java 6 for OS X

Apple pushed out a Java update for its Snow Leopard, Lion and Mountain Lion systems Wednesday, fixing vulnerabilities Oracle tackled in last week’s emergency CVE-2012-4681 patch. Both Java for Mac OS X 10.6 Update 10 and Java for OS X 2012-005 update the Java SE 6 plugin and, in what might be a...

New Mac Trojan Dropper Creates Backdoor, Survives Reboots

There’s a new Mac Trojan dropper that uses a silent installation process and it also has the ability to establish backdoor access to infected machines. Security researchers at Intego found samples of the OSX/Crisis malware on the Virus Total website, but it has not yet been found in the wild...

Apple Patches Quicktime, Fixes 17 Vulnerabilities

Apple continued its recent parade of patches by releasing an update for Quicktime yesterday, fixing 17 different security vulnerabilities, several which could lead to remote code execution. The update, Quicktime 7.7.2, addresses critical issues in Quicktime for Windows 7, Vista and Windows XP SP2...

Apple Update Provides Flashback Defense for Leopard Users

Apple finally pushed out a patch yesterday for users of its older operating system, 10.5 Leopard, protecting them from the much-discussed Flashback Trojan. While Apple issued patches last month for its Lion and Snow Leopard products, yesterday’s Flashback Removal Security Update identifies and...

New Malware Found Exploiting Mac OS X Snow Leopard

Many Mac users recently have found themselves stumbling out of the darkness, shielding their eyes from the spotlight that attackers and malware writers are now shining on them. Malware having been a rarity on OS X, it’s taking some time to adjust, but while that’s happening the attackers are busy...

D-Link DSL-2640B ADSL Router - Authentication Bypass

D-Link DSL-2640B ADSL Router - Authentication Bypass +------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2640B ADSL Router Authentication Bypass Date : 22-02-2012 Author : Ivano...

os-x/x86 bind backdoor tcp port 4444 - 97 bytes

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

New Patch Issued to Fix Problems With OS X

Apple has issued a new patch for Mac OS X Snow Leopard to fix a problem that users were reporting with application-compaitibility with the original fix issued last week. The new patch is designed to alleviate problems with the Rosetta technology in Snow Leopard. The original version of the huge...

Mac OS X XProtect Detection

The remote Mac OS X host includes XProtect, an antivirus / anti- malware application from Apple included with recent releases of Snow Leopard 10.6 and later. It is used to scan files that have been downloaded from the Internet by browsers and other tools. Note that this plugin only gathers...

Apple Safari Update Fixes 58 Bugs, Adds Sandboxing

Along with the release of their new Lion OS X, Apple has issued a new version of its Safari browser for Mac and Windows users, pushing version 5.1 and 5.0.6 to patch a boatload of security holes, some of which are critical. Fifty-eight security vulnerabilities in total are addressed in the update...

PandaLabs Releases : Annual Report 2010 (Must Read) !

In 2010, cyber-criminals have created and distributed a third of all existing viruses. That is, in just 12 months, they have created 34 percent of all malware that has ever existed and has been classified by the company. Furthermore, the Collective Intelligence system, which automatically detects...

UFO: Alien Invasion v2.2.1 IRC Client Remote Code Execution Snow Leopard

Exploit for macOS platform in category remote exploits ============================================================================== UFO: Alien Invasion v2.2.1 IRC Client Remote Code Execution Snow Leopard ROP ==============================================================================...