52 matches found
A week in security (October 8 – 14)
Last week, we warned you away from some dubious Doctor Who streams, explained how Endpoint Detection and Response may not be enough, and explored what happens during a confusing supply chain story. We also showed you how to keep up with security, explained the risks of fake browser updates, and...
CVE-2018-1251
Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains a URL Redirection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect Unity users to arbitrary web URLs by tricking the victim user to click on a maliciously crafted...
Arm your users with knowledge to spot phishing attacks – for free!
Attendees to the Black Hat 2017 security conference said their No. 1 security concern and most time-consuming activity was phishing and social engineering attacks. That’s no surprise with the increase in Business Email Compromise BEC attacks and with most ransomware being delivered by email. But...
Rails delayed_job_web XSS(CVE-2017-12097)
Summary An exploitable XSS vulnerability exists in the filter functionality of the delayedjobweb rails gem version 1.4. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the victim’s browser. An attacker can phish an authenticated...
New ‘Silence’ Banking Trojan copies Carbanak to Steal from Banks (Analysis with IOCs)
Dark Reading is reporting on a new banking trojan called 'Silence' that mimics techniques similar to the Carbanak hacker group targeting banks and financial institutions. The attack vector is similar – target individuals using spear-phish emails to trick them into running a malicious attachment...
Hack with Metasploit: Announcing the UNITED 2017 CTF
Got mad skillz? Want mad skillz? This year at Rapid7s annual UNITED Summit, were hosting a first-of-its-kind Capture the Flag CTF competition. Whether youre a noob to hacking or a grizzled pro, youll emerge from our 25-hour CTF with more knowledge and serious bragging rights. Show off your 1337...
Skype Fixes Credential Phishing Bug "SPYKE"
Microsoft recently fixed a vulnerability in its video chat and messaging app Skype that could have allowed an attacker to execute code on the system it was running on, phish Skype credentials and crash the application. Zacharis Alexandros, an independent researcher who’s also with the European...
Skype Community Cross Site Scripting
Title: ====== Skype Community - Mail Encoding Web Vulnerability Date: ===== 2013-02-21 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=800 MSRC ID: 13493 VL-ID: ===== 800 Common Vulnerability Scoring System: ==================================== 3.5 Introduction:...
Skype Community - Mail Encoding Web Vulnerability
Document Title: =============== Skype Community - Mail Encoding Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=800 MSRC ID: 13493 Release Date: ============= 2013-02-21 Vulnerability Laboratory ID VL-ID:...
13 Years Jail for Phishing Attack
13 Years Jail for Phishing Attack A 27 year old man "Kenneth Joseph Lucas II" from Los Angeles has been sentenced to 13 years in prison for allegedly playing an active role in a phishing attack, aimed at stealing money from consumer bank accounts during the operation "Phish Phry" in 2009. The two...
13 Years Jail for Phishing Attack
13 Years Jail for Phishing Attack A 27 year old man "Kenneth Joseph Lucas II " from Los Angeles has been sentenced to 13 years in prison for allegedly playing an active role in a phishing attack, aimed at stealing money from consumer bank accounts during the operation "Phish Phry" in 2009. The tw...
The Business of Phishing
Today I got a ‘Anti-virus notification message’ from our mail server protected by kav4lms so naturally I was interested in what the content was. Examining the quarantined mail on the server revealed some interesting details starting from the mail header itself. These ‘phish kits’ are archives whi...