Threat Roundup for August 3-10

Today, as we do every week, Talos is giving you a glimpse into the most prevalent threats we’ve observed this week — covering the dates between Aug. 3 - 10. As with previous roundups, this post isn’t meant to be an in-depth analysis. Instead, we will summarize the threats we’ve observed by...

An in-depth malware analysis of QuantLoader

This guest post is written by Vishal Thakur, CSIRT/Salesforce. For more on Vishal, read his bio at the end of the blog. QuantLoader is a Trojan downloader that has been available for sale on underground forums for quite some time now. It has been used in campaigns serving a range of malware,...

Wave of Java-Based RATs Target Tax Filers

Spammers are spreading Java-based remote access Trojans, known as jRATs, targeting tax filers with attachments named “IRS Updates.jar” and “ImportantPDF.jar” that, if executed, give attackers access to compromised endpoints. Zscaler, which is tracking the jRATs, believes some of the campaigns cou...

Rough Auditing Tool for Security (RATS) 2.3 - Array Out of Block Crash

Rough Auditing Tool for Security RATS 2.3 - Array Out of Block Crash Exploit Title: RATS 2.3 Array Out of Block Crash Date: 29th April 2016 Exploit Author: David Silveiro Author Contact: twitter.com/davidsilveiro Website: Xino.co.uk Software Link:...

Rough Auditing Tool for Security (RATS) 2.3 - Array Out of Block Crash

Exploit for linux platform in category dos / poc Exploit Title: RATS 2.3 Array Out of Block Crash Date: 29th April 2016 Exploit Author: David Silveiro Author Contact: twitter.com/davidsilveiro Website: Xino.co.uk Software Link:...

Rough Auditing Tool for Security (RATS) 2.3 - Crash (PoC)

Rough Auditing Tool for Security RATS 2.3 - Crash PoC Exploit Title: RATS 2.3 Crash POC Date: 25th April 2016 Exploit Author: David Silveiro Author Contact: twitter.com/davidsilveiro Website: Xino.co.uk Software Link: https://code.google.com/archive/p/rough-auditing-tool-for-security/downloads...

RATS 2.3 Crash Proof Of Concept

Exploit Title: RATS 2.3 Crash POC Date: 25th April 2016 Exploit Author: David Silveiro Author Contact: twitter.com/davidsilveiro Website: Xino.co.uk Software Link: https://code.google.com/archive/p/rough-auditing-tool-for-security/downloads Version: RATS 2.3 Tested on: Ubuntu 14.04 LTS CVE : 0 da...

Rough Auditing Tool for Security (RATS) 2.3 - Crash (PoC)

Exploit Title: RATS 2.3 Crash POC Date: 25th April 2016 Exploit Author: David Silveiro Author Contact: twitter.com/davidsilveiro Website: Xino.co.uk Software Link: https://code.google.com/archive/p/rough-auditing-tool-for-security/downloads Version: RATS 2.3 Tested on: Ubuntu 14.04 LTS CVE : 0 da...

Lab Rats Guess Pics New - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Lab Rats Guess Pics New published at the 'play' market has multiple vulnerabilities...

FBI’s Cyber Task Force Identifies Stealthy FF-RATs used in Cyber Attack

In both April and June this year, a series of cyber attacks was conducted against the United States Office of Personnel Management OPM. These attacks resulted in 21 million current and former Federal government employees’ information being stolen. After months of investigation, the FBI’s Cyber Ta...

AutoIt Used in Targeted Attacks to Move RATs

Hackers, months ago, revived macros as an attack vector to primarily hide banking malware spread by spam campaigns. Not be left out, some targeted attacks kicked off by convincing phishing emails, have been moving a few remote access Trojans and other malware via Word docs. One particular targete...

Chinese Groups Found Targeting Govt, Military Systems

Two Chinese cyber espionage campaigns are working in tandem in hopes of sniffing out trade secrets from surrounding nations. Researchers from FireEye outlined information about the two attack groups yesterday in advance of a more comprehensive report. One of the groups, Moafree, operates out of t...

win32 / Windows7 Sp1 - rename .jpeg to .vir - 57 bytes

Exploit Title: Win32 / Windows7 Sp1 - rename .jpeg to .vir 57 bytes Date: July, 23 2011 Author: Theuzuki.' Vendor or Software Link: - Version: - Category:: shellcodes Google dork: - Tested on: Windows 7 sp 1 Demo site: - ================================================== Made by: . . \ /| | | | \...

WEB vulnerabilities mining techniques-vulnerability warning-the black bar safety net

Source: security focus Author: 7all sgh81at163.com WEB vulnerability Mining Technology |=---------------= WEB vulnerability Mining Technology=-----------------------------=| |=-----------------------------------------------------------------=| |=---------------= 7all7all7at163. com...

CVE-2004-2361

The CVE-2004-2361 issue affects the Digital Reality game engine as used in Haegemonia 1.0–1.0.7 and Desert Rats vs. Afrika Korps 1.0. A remote attacker can cause a crash (DoS) by sending a chat message with an oversized payload, triggering an out-of-bounds read. The available documents do not pro...

Desert Rats vs. Afrika Korps (Haegemonia bug)

Yesterday has been released the multiplayer demo 1.18 of the game Desert Rats vs. Afrika Korps http://www.desertratsgame.com. Also this game as Haegemonia created by the same developers is vulnerable to the same server crash bug. I have updated the advisory and proof-of-concept I released ten day...