716 matches found
9Xperts SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: 79Xperts SQL Injection Vulnerability Google Dork: intext:"Developed by 79Xperts" inurl:.php?id= Date: 2017-05-06 Exploit Author: Sh4dow email protected My Team: Zero Security Group Vendor Homepage: https://www.79xperts.com Teste...
Low-Cost Ransomware Service Discovered
A new ransomware as a service RaaS called Karmen has been discovered by security researchers at Recorded Future. This service allows anyone, including novices, to set up an account and customize their own ransomware campaign. The Karmen RaaS costs $175 and lets buyers set ransom prices, determine...
NukeBot Banking Trojan Source Code Leaked Online by Author
The author behind NukeBot, a modular banking Trojan, released source code for the malware earlier this month in an apparent effort to regain the trust of the cybercrime community. Gosya, NukeBot’s creator, posted a GitHub link to the malware, calling it a “zeus-like banking trojan,” on several...
Exploit kits remain a cybercrime staple against outdated software – 2016 threat landscape review series
Despite the disruption of Axpergle Angler, which dominated the landscape in early 2016, exploit kits as a whole continued to be a threat to PCs running unpatched software. Some of the most prominent threats, from malvertising to ransomware, used exploit kits to infect millions of computers...
Zeus Variant 'Floki Bot' Targets PoS Data
Researchers have observed an uptick in attacks using the banking malware Floki Bot against U.S., Canadian and Brazilian banks, and insurance firms. Floki Bot, which uses code from the once notorious Zeus banking Trojan, has evolved and unlike its predecessor, is targeting point-of-sale systems vi...
Yahoo Challenged on Claims Breach Was State-Sponsored Attack
As challenges mount against Yahoo’s attribution of a massive 2014 data breach to state-sponsored hackers, CISO Bob Lord yesterday confirmed that a cache of 200 million Yahoo accounts marketed this summer in an underground forum is unrelated to the breach. Speaking at the Structure Security...
Vendetta Brothers, Inc. – A Window Into the Business of the Cybercriminal Underground
FireEye iSIGHT Intelligence has been tracking a pair of cybercriminals that we refer to as the “Vendetta Brothers.” This enterprising duo uses various strategies to compromise point-of-sale systems, steal payment card information and sell it on their underground marketplace “Vendetta World.” The...
Vendetta Brothers, Inc. – A Window Into the Business of the Cybercriminal Underground
FireEye iSIGHT Intelligence has been tracking a pair of cybercriminals that we refer to as the “Vendetta Brothers.” This enterprising duo uses various strategies to compromise point-of-sale systems, steal payment card information and sell it on their underground marketplace “Vendetta World.” The...
xDedic Hacked Servers Market May Be Larger Than Originally Thought
New data anonymously shared with Kaspersky Lab researchers may enlarge the scope of and provide additional context to the hacked RDP servers for sale on the now defunct xDedic marketplace. The underground marketplace was disclosed in a report published last Tuesday describing an eBay-style platfo...
On xDedic, a Flash Zero Day, Facial Recognition, and More
Mike Mimoso and Chris Brook discuss the news of the week, including a password issue at Github, the xDedic marketplace, another Flash zero day, and how the poorly the FBI is doing with facial recognition software. Download: ThreatpostNewsWrapJune172016.mp3 Music by Chris Gonsalves...
Follow The Money: Dissecting the Operations of the Cyber Crime Group FIN6
Cybercrime operations can be intricate and elaborate, with careful planning needed to navigate the various obstacles separating an attacker from a payout. Yet reports on these operations are often fragmentary, as the full scope of attacker activity typically occurs beyond the view of any one grou...
Adobe Flash Player is really into a hopeless situation-vulnerability and early warning-the black bar safety net
! Adobe Flash Player can be smoothly applied to a variety of platforms, but it is also because its application is broad and its own vulnerability, causing it to always be hackers of all ages, this time is no exception. For a long time, hackers always like to use some of the underground network to...
JDM Drift Underground - Dangerous filesystem permissions, MIT license, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application JDM Drift Underground published at the 'play' market has multiple vulnerabilities...
Racer UNDERGROUND - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Racer UNDERGROUND published at the 'play' market has multiple vulnerabilities...
Weather Underground - Apache license, Customized SSL, Dangerous filesystem permissions vulnerabilities
HackApp vulnerability scanner discovered that application Weather Underground published at the 'play' market has multiple vulnerabilities...
London Underground - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application London Underground published at the 'play' market has multiple vulnerabilities...
Tube Map London Underground - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application Tube Map London Underground published at the 'play' market has multiple vulnerabilities...
Tube Map London Underground - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Tube Map London Underground published at the 'play' market has multiple vulnerabilities...
Stanford Cross Site Scripting
/ Exploit Title: Stanford CGI Cross Site Scripting Vulnerability Exploit Author: Sha4yan Vendor Homepage : http://cgi.stanford.edu/ Google Dork: none Date: 2016-01-08 Tested on: Ubuntu / Mozila Firefox Exploit Code: Location & Vulnerable query:...
Pro PoS Malware Simple, But Less Sophisticated Than Initially Thought
A strain of point-of-sale malware that began making the rounds on underground markets late last month is easy to use, but less sophisticated than initial reports suggested. According to researchers at Talos, Cisco’s research division, Pro PoS is mostly built on Alina, another type of POS malware...