EUVD-2023-57922

Malicious code in bioql PyPI...

A week in security (June 23 – June 29)

Last week on Malwarebytes Labs: Gmail’s multi-factor authentication bypassed by hackers to pull off targeted attacks Thousands of private camera feeds found online. Make sure yours isn’t one of them Sextortion email scammers increase their "Hello pervert" money demands Many data brokers are faili...

Fake DocuSign email hides tricky phishing attempt

On my daily rounds, I encountered a phishing attempt that used a not completely unusual, yet clever delivery method. What began as a seemingly routine DocuSign notification turned into a multi-layered deception involving Webflow, a shady redirect, and a legitimate Google login page. Webflow is a...

“Urgent reminder” tax scam wants to phish your Microsoft credentials

Tax season is in full force, and with the filing deadline fast approaching on April 15, scammers are happy to use that sense of urgency to coax us into handing them our cash. In one example, one of our customers recently received an email with an attachment titled "Urgent reminder.” The attachmen...

CVE-2025-27156 Tuleap allows content injection via emails sent by the mass emailing features

Tuleap is an Open Source Suite to improve management of software developments and collaboration. The mass emailing features do not sanitize the content of the HTML emails. A malicious user could use this issue to facilitate a phishing attempt or to indirectly exploit issues in the recipients mail...

CVE-2025-27156 Tuleap allows content injection via emails sent by the mass emailing features

Tuleap is an Open Source Suite to improve management of software developments and collaboration. The mass emailing features do not sanitize the content of the HTML emails. A malicious user could use this issue to facilitate a phishing attempt or to indirectly exploit issues in the recipients mail...

$600 a week to wrap your car? It’s a scam

A friend of mine recently received a text message which they described as "intriguing, but nonsensical". They were convinced it was some sort of scam, but they werent sure what the scammers were up to. Would it turn out to be some sort of phishing attempt? A telephone scam? Banking fraud? That on...

DNC: Highly Publicized ‘Phishing Attempt’ Was Only a Security Test

A day after the Democratic National Committee riled up security researchers and the press, it’s walking back an assertion that there was an attempt to compromise its voter database. Though it seemed like the event was the latest in a series of malicious efforts designed to harvest credentials...

Threat Outbreak Alert RuleID32493: Email Messages Distributing Malicious Software on April 18, 2018

Medium Alert ID: 57521 First Published: 2018 April 18 17:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32493 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID27954: Email Messages Distributing Malicious Software on February 22, 2017

Medium Alert ID: 52726 First Published: 2017 February 27 13:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27954 may contain the following files: Name |...

Threat Outbreak Alert RuleID23198: Email Messages Distributing Malicious Software on June 1, 2016

Medium Alert ID: 46492 First Published: 2016 June 2 12:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23198 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID17507: Email Messages Distributing Malicious Software on August 21, 2015

Medium Alert ID: 40622 First Published: 2015 August 21 20:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17507 may contain the following files: Name |...

Threat Outbreak Alert RuleID14530: Email Messages Distributing Malicious Software on April 9, 2015

Medium Alert ID: 38310 First Published: 2015 April 9 14:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID14530 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID13134: Email Messages Distributing Malicious Software on July 6, 2015

Medium Alert ID: 37030 First Published: 2015 January 16 17:07 GMT Last Updated: 2015 July 7 13:09 GMT Version: 7 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13134 and...

Threat Outbreak Alert RuleID11094: Email Messages Distributing Malicious Software on August 13, 2014

Medium Alert ID: 35282 First Published: 2014 August 13 18:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11094 may contain the following files: Name |...

Threat Outbreak Alert: Email Messages with Links to Malicious Files on March 6, 2014

Medium Alert ID: 33240 First Published: 2014 March 8 02:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a contract for the recipient. The email message attempts to persuade the recipient to open the...

Threat Outbreak Alert: Fake Payment Transfer Notification Email Messages on February 26, 2014

Medium Alert ID: 33056 First Published: 2014 February 26 18:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment transfer notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Faxed Document Notification Email Messages on October 21, 2013

Medium Alert ID: 31386 First Published: 2013 October 21 13:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax notification for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Order Invoice Notification Email Messages on April 12, 2014

Low Alert ID: 29458 First Published: 2013 May 28 14:58 GMT Last Updated: 2014 April 14 13:22 GMT Version: 6 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain an order invoice notification for the recipient. The text in t...

Threat Outbreak Alert: Fake Personal Video Sharing Email Messages on October 9, 2013

Low Alert ID: 27713 First Published: 2013 January 2 15:05 GMT Last Updated: 2013 October 9 18:33 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a video attachment for the recipient. The text in the email message attempt...