Call an Exorcist! My Robot! My Robot's Possessed!

ARCHIVED STORY Call an Exorcist! My Robot’s Possessed! By Mark Bereza · AUG 05, 2020 · 69 MIN READ Overview As part of our continued goal of helping developers provide safer products for businesses and consumers, we here at McAfee Advanced Threat Research ATR recently investigated temi, a...

Call an Exorcist! My Robot! My Robot's Possessed!

ARCHIVED STORY Call an Exorcist! My Robot’s Possessed! By Mark Bereza · AUG 05, 2020 · 69 MIN READ Overview As part of our continued goal of helping developers provide safer products for businesses and consumers, we here at McAfee Advanced Threat Research ATR recently investigated temi , a...

PT-2020-19535

Name of the Vulnerable Software and Affected Versions McAfee Total Protection versions prior to 16.0.R26 Description The issue concerns an unexpected behavior violation that allows local users to turn off real-time scanning via a specially crafted object making a specific function call...

NetWalker Ransomware Rakes in $29M Since March

The NetWalker ransomware has been around for about a year, but it has really made a name for itself in 2020, racking up around $29 million in extortion gains just since March. First detected in August 2019, NetWalker lingered around before surging in use in March through June, according to an...

Take a "NetWalk" on the Wild Side

ARCHIVED STORY Take a “NetWalk” on the Wild Side ATR Operational Intelligence Team · AUG 03, 2020 · 25 MIN READ Executive Summary The NetWalker ransomware, initially known as Mailto, was first detected in August 2019. Since then, new variants were discovered throughout 2019 and the beginning of...

Take a "NetWalk" on the Wild Side

ARCHIVED STORY Take a “NetWalk” on the Wild Side ATR Operational Intelligence Team · AUG 03, 2020 · 25 MIN READ Executive Summary The NetWalker ransomware, initially known as Mailto, was first detected in August 2019. Since then, new variants were discovered throughout 2019 and the beginning of...

Unspecified Vulnerability in McAfee Web Gateway

McAfee Web Gateway MWG is a security gateway product from the U.S.-based McAfee. The product provides threat protection, application control, and data loss prevention. A security vulnerability exists in McAfee MWG versions prior to 9.2.1, which can be exploited by a remote attacker to cause MWG t...

McAfee VirusScan Enterprise Privilege Escalation

The vulnerability of the McTray.exe executable of the Microsoft Windows antivirus software, McAfee VirusScan Enterprise, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

McAfee VirusScan Enterprise Privilege Escalation

The vulnerability of the McTray.exe executable of the Microsoft Windows antivirus software, McAfee VirusScan Enterprise, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

McAfee Total Protection Privilege Escalation

The vulnerability of the McAfee Total Protection antivirus protection lies in its lack of access control mechanisms. Exploiting this vulnerability allows attackers to enhance their privileges by manipulating symbolic links or executing malicious scripts or programs...

McAfee Total Protection Privilege Escalation

The vulnerability of the McAfee Total Protection antivirus protection lies in its lack of access control mechanisms. Exploiting this vulnerability allows attackers to enhance their privileges by manipulating symbolic links or executing malicious scripts or programs...

McAfee Total Protection Privilege Escalation

The vulnerability of the McAfee Total Protection antivirus protection lies in its lack of access control mechanisms. Exploiting this vulnerability allows attackers to enhance their privileges by manipulating symbolic links or executing malicious scripts or programs...

CVE-2020-7292

Inappropriate Encoding for output context vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL...

CVE-2020-7292

Inappropriate Encoding for output context vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL...

CVE-2020-7292

Inappropriate Encoding for output context vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL...

CVE-2020-7292

CVE-2020-7292 affects McAfee Web Gateway (MWG) prior to version 9.2.1. The issue is an Inappropriate Encoding for Output Context , which can allow a remote attacker to cause MWG to return an ambiguous redirect response when a user clicks a malicious URL. The vulnerability is rooted in the output ...

CVE-2020-7292 Web Gateway (MWG) - Inappropriate Encoding for output context

Inappropriate Encoding for output context vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL...

CVE-2020-7292: Inappropriate Encoding for Output Context

Inappropriate Encoding for output context vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL...

PT-2020-19529

Name of the Vulnerable Software and Affected Versions McAfee Web Gateway versions prior to 9.2.1 Description The issue allows a remote attacker to cause the McAfee Web Gateway to return an ambiguous redirect response by getting a user to click on a malicious URL. This is due to an inappropriate...

McAfee Network Security Management Information Disclosure Vulnerability (CNVD-2020-50498)

McAfee Network Security Management NSM is a suite of network security solutions from McAfee that enables real-time monitoring of deployed McAfee intrusion prevention systems across the network. An information disclosure vulnerability exists in McAfee NSM versions prior to 10.1.7.7. A local attack...