XLL_Phishing

XLLPhishing 介绍 随着 Microsoft 近期公告 关于阻止源自互联网（电子邮件和网页下载）的文档中的宏，攻击者开始积极探索其他方式来实现用户驱动访问（UDA）。在寻找可行的网络钓鱼访问方法时，需要权衡和平衡几个因素： 1. 复杂性——用户在操作中需要的步骤越多，我们成功的可能性就越低。 2. 特定性——大多数受害机器是否易受你的攻击？你的攻击架构是否特定？是否需要安装特定软件？ 3. 投递——目标网络上是否存在网络/策略缓解措施，限制你投递恶意文档的方式？ 4. 防御——是否启用了应用程序白名单？ 5. 检测——客户端运行的是哪种 AV/EDR？...

GoPlus Security Raises in Private II+ Funding to Fortify Web3 User Safety

By Waqas GoPlus Security secures $4M to build a user-driven Web3 security network. Their AI-powered platform provides real-time threat detection across 20+ blockchains, empowering users with the SecWareX suite for on-chain security. This is a post from HackRead.com Read the original post: GoPlus...

Opentaps ERP + CRM Detection

The remote host is running Opentaps ERP + CRM. Opentaps is a full-featured ERP + CRM suite which incorporates several open source projects, including: - Apache Geronimo, Tomcat, and OFBiz for the data model and transaction framework - Pentaho and JasperReports for business intelligence - Funambol...