article thumbnail

Severe bug in LibreOffice and OpenOffice suites allows remote code execution

Security Affairs

The security researcher Alex Inführ discovered a severe remote code execution vulnerability in LibreOffice and Apache OpenOffice that could be exploited by tricking victims into opening an ODT (OpenDocument Text) file embedding an event embedded. The expert also published the PoC exploit code for the flaw that works on Windows OS.

article thumbnail

[SI-LAB] FlawedAmmyy Leveraging Undetected XLM Macros as an Infection Vehicle

Security Affairs

File name: patent-2019-02-20T093A283A05-1.xls Next, the user is asked to enable active content, and then the msiexec and subsequent chain of events are automatically executed. However, as already mentioned at the beginning of the technical analysis, SI-LAB team obtained two types of files, namely xls and doc archives.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Guarding Against Solorigate TTPs

eSecurity Planet

Before jumping into the technical details regarding each new malware detected and proper safeguards, here is a brief look at the events to date: Sep 2019. Presenting itself as a JPG file named “gracious_truth.jpg,” Teardrop is a memory-only dropper built to enter a network seamlessly and replace the embedded payload.

article thumbnail

APT34: Glimpse project

Security Affairs

The command and control is implemented by a standalone.NET application working through files. The backend, a nodeJS server, runs and offers Public API and and saves, requests to agents, and results from agents, directly into files named with “UID-IP” convention acting as agent ID.

article thumbnail

Quick and Easy Flash Prototypes

ChiefTech

Flash includes a robust library of customizable user interface components that can be dropped into your prototype and used as they are to add realism (e.g., You’ll be saving each screen as a file named after this identifier (e.g., Your "invisibleButton" symbol should appear in the Library Panel.