83 matches found
LuminousMoth APT: Sweeping attacks for the chosen few
APT actors are known for the frequently targeted nature of their attacks. Typically, they will handpick a set of targets that in turn are handled with almost surgical precision, with infection vectors, malicious implants and payloads being tailored to the victims identities or environment. Its no...
Myanmar’s Internet Shutdown Is an Act of ‘Vast Self-Harm’
On Friday the military junta shut off connectivity across the country. There’s no sign of when it will return...
ProtonVPN CEO Blasts Apple for 'Aiding Tyrants’ in Myanmar
In a blog post filled with a passionate defense of human rights and internet privacy, Andy Yen, the CEO of secure internet provider ProtonVPN, blasted Apple for blocking its latest update and accused the tech juggernaut of helping the global spread of authoritarianism by “giving in to tyrants.” Y...
What Life Is Like Under Myanmar's Internet Shutdown
One couple living in Yangon explain the impact of the military coup's terrifying censorship measures...
TA416 APT Rebounds With New PlugX Malware Variant
The TA416 advanced persistent threat APT actor is back with a vengeance: After a month of inactivity, the group was spotted launching spear-phishing attacks with a never-before-seen Golang variant of its PlugX malware loader. TA416, which is also known as “Mustang Panda” and “RedDelta,” was spott...
mrstravels.dmyanmartravel.com Cross Site Scripting vulnerability OBB-1387212
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
myanmar-visa.online Cross Site Scripting vulnerability OBB-1220035
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
myanmar-visa.online Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1177064 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
This Asia-Pacific Cyber Espionage Campaign Went Undetected for 5 Years
An advanced group of Chinese hackers has recently been spotted to be behind a sustained cyber espionage campaign targeting government entities in Australia, Indonesia, Philippines, Vietnam, Thailand, Myanmar, and Brunei—which went undetected for at least five years and is still an ongoing threat...
Powerful FinSpy Spyware Found Targeting iOS and Android Users in Myanmar
One of the most powerful, infamous, and advanced piece of government-grade commercial surveillance spyware dubbed FinSpy—also known as FinFisher—has been discovered in the wild targeting users in Myanmar. Created by German company Gamma International, FinSpy is spying software that can target...
Powerful FinSpy Spyware Found Targeting iOS and Android Users in Myanmar
One of the most powerful, infamous, and advanced piece of government-grade commercial surveillance spyware dubbed FinSpy —also known as FinFisher —has been discovered in the wild targeting users in Myanmar. Created by German company Gamma International, FinSpy is spying software that can target...
bitdefendermyanmar.com XSS vulnerability
Open Bug Bounty ID: OBB-692606 Description| Value ---|--- Affected Website:| bitdefendermyanmar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
myanmar.gamesclub.mobi XSS vulnerability
Vulnerable URL: http://myanmar.gamesclub.mobi/English/SearchResult.aspx?PId=674=94=OOREDMYANMRGC=OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...
uph-myanmar.gov.mm XSS vulnerability
Vulnerable URL: http://uph-myanmar.gov.mm/index.php?lang=mya" Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 12:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10943445 VIP website status:| No Check...
New RAT Trochilus Skilled at Espionage, Evading Detection
Researchers have uncovered a new remote access Trojan RAT that can evade sandbox analysis, is adept at carrying out espionage, and is being used in targeted threat operations. Named Trochilus, the malware is part of a multi-pronged malware operation that researchers at Arbor Networks are calling...
ASERT Threat Intelligence Report 2015-05 PlugX Threat Activity in Myanmar-vulnerability warning-the black bar safety net
0x01 summary Myanmar is currently one engaged in important political activity of the country. 2 0 1 1 years of democratic reform is to help the government create a conducive to attract investors to the atmosphere. The country is rich in resources, has a variety of Natural Resources and stable...
CVE-2014-7517
The Myanmar Movies HD aka com.wmyanmarmoviesHD application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Myanmar Movies HD aka com.wmyanmarmoviesHD application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7517
The CVE-2014-7517 entry affects the Myanmar Movies HD Android app (package com.wmyanmarmoviesHD) version 0.1. The app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via TLS. The NVD entry lists a MEDIUM s...
CVE-2014-7517
The Myanmar Movies HD aka com.wmyanmarmoviesHD application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...