A week in security (March 05 – March 11)

Last week on Malwarebytes Labs, we paid homage to several women in tech, including some of our very own, on International Women's Day and shared their stories. We also looked into an adware posing as an Android app that claims to live stream the 2018 Winter Olympics, exposed scammers that go by t...

Cryptomining is all the rage among hackers, as DDoS amplification attacks continue

In this week’s InfoSec news review we’ll dive into cryptomining, get the latest on DDoS amplification, go over recent data breaches, and check out another vendor claiming it can crack iPhones. I, me, mine The freight train that’s cryptomining shows no sign of slowing down, and the cyber security...

CVE-2018-0543

Untrusted search path vulnerability in Jtrim 1.53c and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0543

Untrusted search path vulnerability in Jtrim 1.53c and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in WinShot 1.53a and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Jtrim 1.53c and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0544

Untrusted search path vulnerability in WinShot 1.53a and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0543

Untrusted search path vulnerability in Jtrim 1.53c and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0544

CVE-2018-0544 affects WinShot 1.53a and earlier installers, due to an untrusted DLL search path (CWE-427). An attacker could load a Trojan horse DLL from a directory, executing arbitrary code with the privileges of the user invoking the installer. Reports from JVN indicate the vulnerability is co...

CVE-2018-0544

Untrusted search path vulnerability in WinShot 1.53a and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

dayucms v1.527 File Upload Vulnerability

DayuCMS is a free, open source, flexible and simple CMS system. dayucms v1.527 in the file upload vulnerability , the attacker vulnerability by uploading a zip file containing a Trojan horse , the system will automatically decompress , so as to obtain the webshell...

File Inclusion Vulnerability in CmsTop Version v1.0.0.800

CmsTop Popular Edition mainly solves the needs of small and medium-sized local websites, information channels of industrial websites, as well as website publishing and management of online media, institutions, schools and enterprises. CmsTop version 1.0.0.800 has a local file inclusion...

Mobile malware evolution 2017

The year in figures In 2017, Kaspersky Lab detected the following: 5,730,916 malicious installation packages 94,368 mobile banking Trojans 544,107 mobile ransomware Trojans Trends of the year Rooting malware: no surrender For the last few years, rooting malware has been the biggest threat to...

File Upload Vulnerability in HaoCMS Web Management System

HaoCMS is a website management system of Frontier Cloud Technology Beijing Co. HaoCMS website management system has a file upload vulnerability that can be exploited by an attacker to create a files directory and upload Trojan horse files to further gain control of the website server...

Arbitrary File Upload Vulnerability in Monxin v4.0

Monxin mall system is a mall management system based on PC mall + mobile mall + WeChat mall + offline cashier, members / orders / commodities / inventory online and offline real-time synchronization of data across the network. Monxin v4.0 suffers from an arbitrary file upload vulnerability, which...

File Upload Vulnerability in PESCMS TEAM v2.1.0

PESCMS TEAM is a task management system open-sourced under the GPLv2 license. A file upload vulnerability exists in PESCMS TEAM v2.1.0 due to the system failing to perform a security check on uploaded zip archive files. An attacker can exploit this vulnerability to upload a Trojan horse file to...

42 Android Models infected with data stealing banking trojan

By Uzair Amir There are 42 cheap Android models currently infected with Triada banking This is a post from HackRead.com Read the original post: 42 Android Models infected with data stealing banking trojan...

Code Execution Vulnerability in Coupon Pusher CMS v1.8

Push Couponer CMS is a PHP Taobao coupon website developed in PHP+MySQL. A code execution vulnerability exists in PushCoupon CMS v1.8, which is caused by the system failing to adequately filter the values of uninvited parameters and cached files. An attacker can exploit this vulnerability to uplo...

Remote Command Execution Vulnerability in Finecms V5.3.0 Backend

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. A remote command execution vulnerability exists in the backend of Finecms V5.3.0, which can be exploited by an attacker to write Trojan scripts to gain control of the server...

YIXUNCMS v2.0.4.91 has an arbitrary file write vulnerability

YIXUNCMS is a convenient CMS management system developed by Yixun BS Software Studio specializing in website construction for small and medium-sized enterprises. YIXUNCMS v2.0.4.91 suffers from an arbitrary file write vulnerability, which is caused by the system failing to strictly filter...