telegram-phish-simulator

⚠️ 텔레그램 피싱 시뮬레이터 – 교육용 보안 도구 불법 활동에 이 코드를 사용하지 마십시오. 이 저장소는 사이버 보안 교육, 인식 제고, 그리고 승인된 실험실 기반 테스트만을 위해 제작된 시뮬레이션입니다. 📚 목차 소개 구성 내용 안전한 실험실 구성 실행 방법 시뮬레이션된 공격 흐름 방어 지침 윤리적 사용 라이선스 🎯 소개 이 프로젝트는 다음을 목적으로 하는 텔레그램 피싱 시뮬레이션을 시연합니다: 사이버 보안 교육, 피싱 인식 훈련, 방어 연구, 격리된 환경에서의 승인된 침투 테스트. 공격자가 가짜 "무료 프리미엄" 혜택을...

recaptcha-phish

reCAPTCHA Phish John Hammond | September 13, 2024 これは、2024年8月から9月にかけて実際の環境で観測されたソーシャルエンジニアリングおよびフィッシングの誘導（lure）を再現するための小さなハーネスです。 🪝 実際に観測された手口 当初は 「人間であることを確認してください」 という偽装で観測されており、攻撃ベクトルは コピー＆ペースト です。 この手口は、ユーザーにホットキー Win+R で Windows の「ファイル名を指定して実行」ダイアログを開くように指示し、Web...

EUVD-2024-26226

Malicious code in bioql PyPI...

EUVD-2024-26227

Malicious code in bioql PyPI...

Anti-Phishing Training Does Not Work: a Large-Scale Empirical Assessment of Multi-Modal Training Grounded in the NIST Phish Scale

Social engineering attacks using email, commonly known as phishing, are a critical cybersecurity threat. Phishing attacks often lead to operational incidents and data breaches. As a result, many organizations allocate a substantial portion of their cybersecurity budgets to phishing awareness...

CVE-2024-29209

A medium severity vulnerability has been identified in the update mechanism of the Phish Alert Button for Outlook, which could allow an attacker to remotely execute arbitrary code on the host machine. The vulnerability arises from the application's failure to securely verify the authenticity and...

CVE-2024-29210

A local privilege escalation LPE vulnerability has been identified in Phish Alert Button for Outlook PAB, specifically within its configuration management functionalities. This vulnerability allows a regular user to modify the application's configuration file to redirect update checks to an...

A week in security (October 28 – November 3)

Last week on Malwarebytes Labs: 1,000+ web shops infected by "Phish ‘n Ships" criminals who create fake product listings for in-demand products Android malware FakeCall intercepts your calls to the bank Patch now! New Chrome update for two critical vulnerabilities Update your iPhone, Mac, Watch:...

1,000+ web shops infected by “Phish ‘n Ships” criminals who create fake product listings for in-demand products

Researchers at the Satori Threat Intelligence and Research team have published their findings about a group of cybercriminals that infect legitimate web shops to create and promote fake product listings. The threat, dubbed "Phish ‘n Ships" by the researchers, reportedly infected more than 1,000...

CVE-2024-29210

A local privilege escalation LPE vulnerability has been identified in Phish Alert Button for Outlook PAB, specifically within its configuration management functionalities. This vulnerability allows a regular user to modify the application's configuration file to redirect update checks to an...

CVE-2024-29209

A medium severity vulnerability has been identified in the update mechanism of the Phish Alert Button for Outlook, which could allow an attacker to remotely execute arbitrary code on the host machine. The vulnerability arises from the application's failure to securely verify the authenticity and...

CVE-2024-29209

A medium severity vulnerability has been identified in the update mechanism of the Phish Alert Button for Outlook, which could allow an attacker to remotely execute arbitrary code on the host machine. The vulnerability arises from the application's failure to securely verify the authenticity and...

CVE-2024-29210

A local privilege escalation LPE vulnerability has been identified in Phish Alert Button for Outlook PAB, specifically within its configuration management functionalities. This vulnerability allows a regular user to modify the application's configuration file to redirect update checks to an...

CVE-2024-29210

A local privilege escalation LPE vulnerability has been identified in Phish Alert Button for Outlook PAB, specifically within its configuration management functionalities. This vulnerability allows a regular user to modify the application's configuration file to redirect update checks to an...

CVE-2024-29209

The CVE-2024-29209/29210 family concerns Phish Alert Button (PAB) for Outlook and related KnowBe4 clients. Technical details across connected records show: attack via update mechanism (CVE-2024-29209) where the client fails to validate the update server’s TLS/SSL and ignores digital signatures, e...

CVE-2024-29209

A medium severity vulnerability has been identified in the update mechanism of the Phish Alert Button for Outlook, which could allow an attacker to remotely execute arbitrary code on the host machine. The vulnerability arises from the application's failure to securely verify the authenticity and...

CVE-2024-29210

CVE-2024-29210 describes a local privilege escalation in Phish Alert Button for Outlook (PAB) caused by insecure permissions on the configuration file (update server URL). An unprivileged local user can modify the configuration to point updates to a malicious server, enabling LPE in conjunction w...

PT-2024-22812 · Unknown · Phish Alert Button For Outlook

Name of the Vulnerable Software and Affected Versions: Phish Alert Button for Outlook affected versions not specified Description: A local privilege escalation issue has been identified in the configuration management functionalities of Phish Alert Button for Outlook. Recommendations: At the...

Knowbe4 Phish Alert Button 安全漏洞

Knowbe4 Phish Alert Button is an application from Knowbe4 Inc. A security vulnerability exists in Knowbe4 Phish Alert Button that stems from the ability to perform local elevation of privilege by modifying configuration files...

Knowbe4 Phish Alert Button 安全漏洞

Knowbe4 Phish Alert Button is an application from Knowbe4, Inc. A security vulnerability exists in Knowbe4 Phish Alert Button, which stems from insufficient domain authentication and could lead to remote code execution by Outlook PAB via DNS spoofing...