Iranian APT’s new data extraction tool Hyperscrape

Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary Charming Kitten, an Iranian government-backed threat group, has been employing a new data extraction tool, HYPERSCAPE. It has been used to retrieve data from Microsoft Outlook, Yahoo, and Gmail accounts...

Fedora: Security Advisory for trafficserver (FEDORA-2022-9832c0c04b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Google Uncovers Tool Used by Iranian Hackers to Steal Data from Email Accounts

The Iranian government-backed actor known as Charming Kitten has added a new tool to its malware arsenal that allows it to retrieve user data from Gmail, Yahoo!, and Microsoft Outlook accounts. Dubbed HYPERSCRAPE by Google Threat Analysis Group TAG, the actively in-development malicious software ...

[SECURITY] Fedora 36 Update: trafficserver-9.1.3-1.fc36

Traffic Server is a high-performance building block for cloud services. It's more than just a caching proxy server; it also has support for plugins to build large scale web applications. Key features: Caching - Improve your response time, while reducing server load and bandwidth needs by caching...

Malicious code in yahoo-react-popup-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e505b7871307d7dfdf3bef0c52da5103e1b0e20b4fa2c34749183d4e29a55be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7313 Malicious code in yahoo-react-popup-select (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e505b7871307d7dfdf3bef0c52da5103e1b0e20b4fa2c34749183d4e29a55be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yahoo-react-formsy-input (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb2568efcd5d04e784813f8656948987d1e103bd2a0ad01e9ae00a0ab75111cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yahoo-react-input (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd1dfd6cdfece853733d5359e6a2f814426826eae33421f34d3abbe01ee6b854 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7309 Malicious code in yahoo-react-input (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd1dfd6cdfece853733d5359e6a2f814426826eae33421f34d3abbe01ee6b854 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7308 Malicious code in yahoo-react-formsy-input (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb2568efcd5d04e784813f8656948987d1e103bd2a0ad01e9ae00a0ab75111cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yahoo-react-checkbox-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 385208ccd7b1950edcb114c1e908cf88eff1a39de277bc22a30cd0d8dae2344b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7307 Malicious code in yahoo-react-checkbox-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 385208ccd7b1950edcb114c1e908cf88eff1a39de277bc22a30cd0d8dae2344b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yahoo-react-message-bar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c93de4c07d3ed90986d8570c4eae9c9935dc08e0da39c0772091aba1fcba8f58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7310 Malicious code in yahoo-react-message-bar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c93de4c07d3ed90986d8570c4eae9c9935dc08e0da39c0772091aba1fcba8f58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yahoo-react-multi-select-box (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59b42c16c52333b42adb394c8784f37abd19319bd11704e6381f6c1af61d4d1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yahoo-react-pillbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ae5a29706a7f5bf5f9f2496dd7182f57b1fbee762f4951ff1cef1e63631b8f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7311 Malicious code in yahoo-react-multi-select-box (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59b42c16c52333b42adb394c8784f37abd19319bd11704e6381f6c1af61d4d1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7312 Malicious code in yahoo-react-pillbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ae5a29706a7f5bf5f9f2496dd7182f57b1fbee762f4951ff1cef1e63631b8f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yahoo-react-select-box (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1a8706063b885d37403820af35d03bc7bffb582875ec84783fa0b273b6680d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7314 Malicious code in yahoo-react-select-box (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1a8706063b885d37403820af35d03bc7bffb582875ec84783fa0b273b6680d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...