axsharma

26 ms·

91.
by axsharma 6y ago
"Discord.dll" a successor to #npm "fallguys" went undetected for over 5 months. The heavily obfuscated multi-file malware exfiltrates web browser files from Yandex, Chrome, Opera, Brave (leveldb storage files) and sends
92.
HMRC tax smishing scam 'mirrors' real UK banking sites, collects extensive info(bleepingcomputer.com)
1 points by axsharma 6y ago|2 comments
93.
by axsharma 6y ago
The smishing campaign is concerning as it employs multiple HMRC phishing domains and tactics, with new domains added every day as older ones get flagged by spam filters. Not only do the phishing pages mimic HMRC's web interface meticul
94.
Trump lawsuit site to report “rejected votes” leaked voter data(bleepingcomputer.com)
5 points by axsharma 6y ago|2 comments
95.
by axsharma 6y ago
Some users allege SQL injections made it possible to also obtain voters' SSN and DOB.
96.
Reverse shell botnet Gitpaste-12 spreads via GitHub and Pastebin(bleepingcomputer.com)
2 points by axsharma 6y ago|1 comments
97.
by axsharma 6y ago
It exploits at least 12 known vulns, targets random IPs in a subnet, mines XMR, evades detection, and gains persistence.
98.
Apple search bot leaked IPs via proxy configuration. Fixed after 9 months.(bleepingcomputer.com)
1 points by axsharma 6y ago|0 comments
99.
Someone just emptied out a $1B Bitcoin wallet(bleepingcomputer.com)
22 points by axsharma 6y ago|0 comments
100.
SaltStack reveals new critical vulnerabilities, patch now(bleepingcomputer.com)
7 points by axsharma 6y ago|1 comments
101.
by axsharma 6y ago
Confusing disclosure timeline: While the vulnerabilities were disclosed today, it is worth noting that fixes for all three vulnerabilities were committed and disclosed to GitHub much earlier. For example, the fix for CVE-2020-16846 was push
102.
Privacy-focused Brave browser grew over 130% in the past year(bleepingcomputer.com)
1 points by axsharma 6y ago|0 comments
103.
Imposter Twilio NPM malware backdoors Linux machines(blog.sonatype.com)
3 points by axsharma 6y ago|0 comments
104.
Home Depot blunder spills order info of hundreds of customers to strangers(bleepingcomputer.com)
3 points by axsharma 6y ago|1 comments
105.
by axsharma 6y ago
Exclusive: Home Depot Canada accidentally sent several customers HUNDREDS of order pick-up emails exposing order info, customer name, order history and last 4 digits of payment card due to "a systems error."
106.
Amazon sacks insiders over data leak, alerts customers(bleepingcomputer.com)
1 points by axsharma 6y ago|0 comments
107.
Lightning Network fully discloses “concerning” crypto vulnerabilities(bleepingcomputer.com)
2 points by axsharma 6y ago|1 comments
108.
by axsharma 6y ago
The vulnerabilities that the October 9th upgrade advisory briefly talked about have been fully disclosed this week by Lightning Network.
109.
Bug bounty reporter cashes out on someone else's vulnerability exploit(bleepingcomputer.com)
7 points by axsharma 6y ago|1 comments
110.
by axsharma 6y ago
Monero staff has stated in the same HackerOne report that even though the bug was plagiarized, that they are unable to withdraw the already-paid sum of money. "NB: this disclosure was stolen (!!) from Guido Vranken's original disc
111.
by axsharma 6y ago
More NodeJS malware has been spotted by NPM that spawned reverse shells on Windows & Linux machines, exfiltrated environment data, and has scored over 1,000 downloads!
112.
NPM nukes Node.js malware opening Windows, Linux reverse shells(bleepingcomputer.com)
3 points by axsharma 6y ago|1 comments
113.
Microsoft fixes certificate spoofing vulnerability abusing CAT files(bleepingcomputer.com)
1 points by axsharma 6y ago|1 comments
114.
by axsharma 6y ago
This one hasn't been talked about much publicly, but an advisory shared with Microsoft enterprise customers (and BleepingComputer) mentions use of .CAT files to spoof signatures on Windows.
115.
Palo Alto Networks researcher discovers Linux privilege escalation vulnerability(securityreport.com)
5 points by axsharma 6y ago|1 comments
116.
by axsharma 6y ago
Palo Alto Networks researcher Or Cohen discovered a Linux privilege escalation vulnerability that let standard Linux user to gain root permissions.
117.
by axsharma 6y ago
that's not only to make itself look more legit to humans, but to evade detection by security tools, web proxies, email gateways, etc. aka 'bots'. The irony of it.
118.
Office 365 phishing email asks for captchas to remain undetected(securityreport.com)
5 points by axsharma 6y ago|1 comments
119.
by axsharma 6y ago
Great find!
120.
Telegram app used by malware to infiltrate e-commerce sites(securityreport.com)
1 points by axsharma 6y ago|2 comments

More ›