Directory Traversal

github.com/mholt/caddy is vulnerable to directory traversal attacks. The vulnerability was introduced by a regression introduced when clients were updated to use Storage instead of Locker, and exists due to the lack of sanitization of file path. It can be optionally be mitigated by running...

CVE-2017-16835

The "Photo,Video Locker-Calculator" application 12.0 for Android has android:allowBackup="true" in AndroidManifest.xml, which allows attackers to obtain sensitive cleartext information via an "adb backup '-f smart.calculator.gallerylock'" command...

CVE-2017-18192

smart/calculator/gallerylock/CalculatorActivity.java in the "Photo,Video Locker-Calculator" application through 18 for Android allows attackers to access files via the backdoor 17621762 PIN...

CVE-2017-18192

CVE-2017-18192 describes a vulnerability in the Android version of the app named “Photo,Video Locker-Calculator.” The issue, located in CalculatorActivity.java, allows an attacker to access files via a backdoor PIN (17621762). According to the connected documents, this affects the app through ver...

3 reasons the ransomware threat will continue in 2018

Ransomware has been on the scene for more than a decade now, and thanks to increasingly sophisticated samples that attack victims across nearly every country, it's become a global threat. According to CSO, ransomware has a longer history than many realize. While large-scale attacks reached the...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

Romanian Police Arrest 5 People for Spreading CTB Locker and Cerber Ransomware

Romanian police have arrested five individuals suspected of infecting tens of thousands of computers across Europe and the United States in recent years by spreading two infamous ransomware families—Cerber and CTB Locker. Under Operation Bakovia—a major global police operation conducted by Europo...

McAfee Labs Advanced Threat Research Aids Arrest of Suspected Cybercrime Gang Linked to Top Malware CTB Locker

ARCHIVED STORY McAfee Labs Advanced Threat Research Aids Arrest of Suspected Cybercrime Gang Linked to Top Malware CTB Locker By Trellix · December 20, 2017 In our recent research, we interviewed the actors behind ransomware campaigns. One of the interesting findings was cybercriminals seemed to...

McAfee Labs Advanced Threat Research Aids Arrest of Suspected Cybercrime Gang Linked to Top Malware CTB Locker

ARCHIVED STORY McAfee Labs Advanced Threat Research Aids Arrest of Suspected Cybercrime Gang Linked to Top Malware CTB Locker By Trellix · December 20, 2017 In our recent research, we interviewed the actors behind ransomware campaigns. One of the interesting findings was cybercriminals seemed to...

SQL Injection Vulnerability in EasySNS Community Backend Administrator locker method

EasySNS community group version for the new database architecture and program structure, to group as the basic unit to form an interactive community. There is a SQL injection vulnerability in the EasySNS Community background administrator locker method, which can be exploited by attackers to obta...

Excerpts from The Ransomware Economy: Analysis

Carbon Black recently published an investigative report on the Dark Web marketplace for ransomware. This is an excerpt from that report, which you can find here. For more information about the rise of ransomware, and what you can do about it, check out the Future-Proof Your Ransomware Prevention...

Multiple PHP Webservers Ransomware Upload

A file upload vulnerability exists in various PHP webservers. Successful exploitation of this vulnerability could allow a remote attacker to execute PHP Ransomware code on the compromised server. This method is often used by ransomware such as EV, Lalabitch, JapanLocker, CTB-Locker and others...

August 15, 2017—KB4034663 (Preview of Monthly Rollup)

None None...

WannaCry about Vulnerability Management

Nearly all mainstream media wrote today about massive ransomware attacks around the world: 16 medical institutions in UK, strong rumours that huge companies in Russia, and even Russian Ministry of Internal Affairs suffered a damage. At this moment Kaspersky recorded more than 45,000 attacks in 74...

Half of Ransomware Victims Pay Criminals' Demands to Recover Data

A report on ransomware sheds new light on attacks in 2016, starting with the fact that 48 percent of businesses hit by ransomware said they paid the ransom. That’s in spite of pleas from cyber security experts and the FBI not to do so. Other insights include the average ransom payment was $2,500...

Advanced Desktop Locker 6.0.0 - Lock Screen Bypass Vulnerability

Exploit for windows platform in category local exploits Exploit Title : Advanced Desktop Locker Locker Bypass Date: 8 - 1 - 2017 Software Link: http://www.encrypt4all.com/products/advanced-desktop-locker-information.php Sofrware Version : 6.0.0 Exploit Author: Squnity | Sir.matrix Contact:...

Advanced Desktop Locker Lock Screen Bypass Vulnerability

Advanced Desktop Locker is a desktop protection tool that bypasses screen protection by killing the Advanced Desktop Locker process. Advanced Desktop Locker suffers from a lock screen bypass vulnerability that can be exploited by attackers to bypass the lock screen...

Advanced Desktop Locker 6.0.0 - Lock Screen Bypass

Advanced Desktop Locker 6.0.0 - Lock Screen Bypass Exploit Title : Advanced Desktop Locker Locker Bypass Date: 8 - 1 - 2017 Software Link: http://www.encrypt4all.com/products/advanced-desktop-locker-information.php Sofrware Version : 6.0.0 Exploit Author: Squnity | Sir.matrix Contact:...

Advanced Desktop Locker 6.0.0 Bypass

Exploit Title : Advanced Desktop Locker Locker Bypass Date: 8 - 1 - 2017 Software Link: http://www.encrypt4all.com/products/advanced-desktop-locker-information.php Sofrware Version : 6.0.0 Exploit Author: Squnity | Sir.matrix Contact: [email protected] Website: https://www.squnity.com Category...

Advanced Desktop Locker 6.0.0 - Lock Screen Bypass

Exploit Title : Advanced Desktop Locker Locker Bypass Date: 8 - 1 - 2017 Software Link: http://www.encrypt4all.com/products/advanced-desktop-locker-information.php Sofrware Version : 6.0.0 Exploit Author: Squnity | Sir.matrix Contact: [email protected] Website: https://www.squnity.com Category...