Researchers Discover Raindrop — 4th Malware Linked to the SolarWinds Attack

Cybersecurity researchers have unearthed a fourth new malware strain—designed to spread the malware onto other computers in victims' networks—which was deployed as part of the SolarWinds supply chain attack disclosed late last year. Dubbed "Raindrop" by Broadcom-owned Symantec, the malware joins...

Newfuture Trojan V.1.0 BETA 1 Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/4f9376824718ff23a6238c877f73ff73.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Newfuture Trojan V.1.0 BETA 1 Vulnerability: Insecure Permissions Description: Newfuture by Wider is...

Shenzhen Tencent Computer System Co., Ltd. government weibo has dll hijacking vulnerability (CNVD-2021-09532)

Government WeChat is a smart office solution for the government provided by Tencent's Enterprise WeChat team on the basis of the original Enterprise WeChat. Shenzhen Tencent Computer Systems Limited Government WeChat has a dll hijacking vulnerability, which can be exploited by attackers to cause...

Shenzhen Tencent Computer System Co., Ltd.'s Government WeChat suffers from dll hijacking vulnerability (CNVD-2021-09531)

Government WeChat is a smart office solution for the government provided by Tencent's Enterprise WeChat team on the basis of the original Enterprise WeChat. Shenzhen Tencent Computer Systems Limited Government WeChat has a dll hijacking vulnerability, which can be exploited by attackers to cause...

Shenzhen Tencent Computer Systems Limited Government WeChat suffers from dll hijacking vulnerability

Government WeChat is a smart office solution for the government provided by Tencent's Enterprise WeChat team on the basis of the original Enterprise WeChat. Shenzhen Tencent Computer Systems Limited Government WeChat has a dll hijacking vulnerability, which can be exploited by attackers to cause...

DLL Hijacking Vulnerability in 115 PC Version of Guangdong One One Five Technology Co.

115 PC version is a collection of 115, 115 organization, browser PC client, and 115 service perfect integration. Ltd. 115 computer version of the DLL hijacking vulnerability, the attacker can be exploited to cause the user's computer to be remote control or implanted Trojan horse...

DLL Hijacking Vulnerability in 115chrome.exe Module in 115 Computer Edition by Guangdong One One Five Technology Co.

115 PC version is a collection of 115, 115 organization, browser PC client, and 115 service perfect integration. Ltd. 115 computer version of the dll hijacking vulnerability, the attacker can be exploited to cause the user's computer to be remote control or implanted Trojan horse...

CVE-2021-20616

Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2021-20616

Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2021-20616

Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Penguin Gaming has a dll hijacking vulnerability (CNVD-2021-11799)

Penguin Gaming is a mobile gaming platform under Tencent. It is located in the "connector" of the e-sports ecosystem, integrating the resources of Tencent.com, QQ Hand Games and Tencent Hublot, and cooperating in depth with professional e-sports events such as QGC and TGA. Penguin Gaming has a dl...

360 Security Browser suffers from dll hijacking vulnerability (CNVD-2021-11806)

360 Security Browser 360 Security Browser is a browser based on the dual kernel of IE and Chrome launched by 360 Security Center, which is a product of cooperation between Window of the World developer Phoenix Studio and 360 Security Center. 360 Security Browser has a dll hijacking vulnerability,...

Penguin Gaming has a dll hijacking vulnerability (CNVD-2021-11800)

Penguin Gaming is a mobile gaming platform under Tencent. It is located in the "connector" of the e-sports ecosystem, integrating the resources of Tencent.com, QQ Hand Games and Tencent Hublot, and cooperating in depth with professional e-sports events such as QGC and TGA. Penguin Gaming has a dl...

Penguin Gaming has a dll hijacking vulnerability

Penguin Gaming is Tencent's mobile gaming platform. It is located in the "connector" of the e-sports ecosystem, integrating the resources of Tencent.com, QQ Hand Games, and Tencent Mutual Entertainment team, and cooperating deeply with professional e-sports events such as QGC and TGA. Penguin...

Penguin Gaming has a dll hijacking vulnerability

Penguin Gaming is a mobile gaming platform under Tencent. It is located in the "connector" of the e-sports ecosystem, integrating the resources of Tencent.com, QQ Hand Games and Tencent Hublot, and cooperating in depth with professional e-sports events such as QGC and TGA. Penguin Gaming has a dl...

Emotet: A Year in the Life of a Malware

Overview Emotet malware has been around since 2014, but 2020 saw a resurgence of attacks. In September 2020, Emotet affected 14% of organizations worldwide. So, what is Emotet? And why is it so dangerous? Emotet is a sophisticated trojan that is most commonly used as a dropper for other malware...

Experts Sound Alarm On New Android Malware Sold On Hacking Forums

Cybersecurity researchers have exposed the operations of an Android malware vendor who teamed up with a second threat actor to market and sell a remote access Trojan RAT capable of device takeover and exfiltration of photos, locations, contacts, and messages from popular apps such as Facebook,...

Experts Sound Alarm On New Android Malware Sold On Hacking Forums

Cybersecurity researchers have exposed the operations of an Android malware vendor who teamed up with a second threat actor to market and sell a remote access Trojan RAT capable of device takeover and exfiltration of photos, locations, contacts, and messages from popular apps such as Facebook,...

360 Security Browser suffers from dll hijacking vulnerability (CNVD-2021-11807)

360 Security Browser 360 Security Browser is a browser based on the dual kernel of IE and Chrome launched by 360 Security Center, which is a product of cooperation between Window of the World developer Phoenix Studio and 360 Security Center. 360 Security Browser has a dll hijacking vulnerability,...