Threat Source newsletter for May 21, 2020

Newsletter compiled by Jon Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. Beers with Talos chugs on during quarantine with the latest episode of “The In-Between.” Once again, the hosts talk about everything but...

The wolf is back...

By Warren Mercer, Paul Rascagneres and Vitor Ventura. News summaryThai Android devices and users are being targeted by a modified version of DenDroid we are calling "WolfRAT," now targeting messaging apps like WhatsApp, Facebook Messenger and Line.We assess with high confidence that this modified...

WolfRAT Android Malware Targets WhatsApp, Facebook Messenger

UPDATE A new Android malware family has been discovered, which targets popular messaging apps like WhatsApp and Facebook Messenger to gather intelligence on Android victims. The malware, dubbed WolfRAT, is under active development, and was recently identified in campaigns targeting Thai users...

Unfixed XSS vulnerability at www.gymnastics-stuff.com

Security researcher wolfrat, has submitted on 03/04/2008 a cross-site-scripting XSS vulnerability affecting www.gymnastics-stuff.com, which at the time of submission ranked 27317284 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008. It...

Unfixed XSS vulnerability at www.americanventuremagazine.com

Security researcher wolfrat, has submitted on 21/09/2007 a cross-site-scripting XSS vulnerability affecting www.americanventuremagazine.com, which at the time of submission ranked 162574 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/09/200...

Unfixed XSS vulnerability at www.glitteryourway.com

Security researcher wolfrat, has submitted on 21/09/2007 a cross-site-scripting XSS vulnerability affecting www.glitteryourway.com, which at the time of submission ranked 31691 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/09/2007. It is...

Unfixed XSS vulnerability at magicteapot.com

Security researcher wolfrat, has submitted on 21/09/2007 a cross-site-scripting XSS vulnerability affecting magicteapot.com, which at the time of submission ranked 24089 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/09/2007. It is currentl...