Remove 02
article thumbnail

EnemyBot malware adds new exploits to target CMS servers and Android devices

Security Affairs

CVE Number Affected devices CVE-2021-44228, CVE-2021-45046 Log4J RCE CVE-2022-1388 F5 BIG IP RCE No CVE (vulnerability published on 2022-02) Adobe ColdFusion 11 RCE CVE-2020-7961 Liferay Portal – Java Unmarshalling via JSONWS RCE No CVE (vulnerability published on 2022-04) PHP Scriptcase 9.7 LFI CVE-2018-16763 Fuel CMS 1.4.1

CMS 143
article thumbnail

Lampion malware v2 February 2020

Security Affairs

Since end-December 2019 lampion malware has been noted as the most prominent malware targeting Portuguese organizations. 2020-02-13] #Lampion v2 #portugal #malware #ATA 0998f6473004e0ba54ead5784ba62db8 h}//vrau-x.s3.us-east-2.amazonaws.[com/0.zip Malicious zip file: DPD-Track&Trace-IDPT-NEgn-02-2020_23. zip h//oiurx14x.s3.us-east-2.amazonaws.}com/P-14-7.dll

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

CISA adds WatchGuard flaw to its Known Exploited Vulnerabilities Catalog

Security Affairs

The Cyclops Blink malware has been active since at least June 2019, it targets WatchGuard Firebox, Small Office/Home Office (SOHO) network devices, and ASUS router models. The vulnerabilities added to the catalog have to be addressed by federal agencies by May 02, 2022.

IT 98
article thumbnail

[SI-LAB] FlawedAmmyy Leveraging Undetected XLM Macros as an Infection Vehicle

Security Affairs

In February 2019, SI-LAB captured multiple samples of phishing campaigns using an Office Excel document carrying a malicious Excel 4.0 File name: patent-2019-02-20T093A283A05-1.xls This binary was signed on Tuesday, February 19th, 2019, and the next email is also associated: NastasyaTurkina68@mail.ru; from a Russian provider.

article thumbnail

Google outages in Eastern US affected Gmail, G-Suite, YouTube, and more

Security Affairs

I discovered the problem because I was not able to access Analytics data for my blog. We will provide an update by Sunday, 2019-06-02 16:00 US/Pacific.” Users also experience problems in accessing third-party services such as Snapchat and Discord. ” reported the company service status page.

Cloud 101
article thumbnail

Expert discovered how to brick all Samsung mobile phones

Security Affairs

I just published "How to brick all Samsung phones" on @Medium [link] — Elliot Alderson (@fs0c131y) May 12, 2019. French white hat hacker Robert Baptiste (aka @fs0c131y) discovered how to brick all Samsung mobile phones. Baptiste bought a Samsung mobile phone a few months ago and decided to analyze it.

Security 111
article thumbnail

Hackers are again attacking Portuguese banking organizations via Android Trojan-Banker

Security Affairs

List of some baking campaigns this Brazilian threat group has performed in Portugal: 13/03 – Novo Banco Trojan-Banker 12/03 – Caixa Geral Depósitos 13/02 – Millennium BCP e Montepio 20/01 – Montepio e Millennium BCP 14/01 – Santander e Novo Banco 12-2019/01-2020: Lampion Trojan (…). Pierluigi Paganini.