■□□□□ Hackers abuses Microsoft Build Engine (MSBuild) to filelessly deliver malware on targeted Windows systems, including RAT and password-stealer. https://securityaffairs.co/wordpress/117969/malware/msbuild-delivers-rat.html https://t.me/cKure/7985
All posts in May 2021
May 17, 2021 at 01:53AM
■■□□□ Data-Leak: JSON dunno of EtoudPlus.ir (Iran ) being leaked online. https://t.me/cKure/7984
May 17, 2021 at 01:50AM
■■■□□ DFIR-O365RC – PowerShell Module For Office 365 And Azure AD Log Collection. https://github.com/ANSSI-FR/DFIR-O365RC https://t.me/cKure/7983
May 17, 2021 at 01:42AM
■■■■■ Data-Leak: Pro Palestine hacking groups under the campaign #OpIsrael targeted multiple Israel based organisations and successfully compromised the government and non-government entities. Following is the compilation of the targetted hosts which are under active attack. رئيس الحكومة الاسرائيلية: http://www.pmo.gov.il/ · وزارة المالية: http://www.mof.gov.il/ · وزارة الدفاع: http://www.mod.gov.il/ · وزارة الأمن الداخلى: http://www.mops.gov.il/ · وزارة…
May 17, 2021 at 01:31AM
■■□□□ Pakistan : Pak-linked cyber espionage group, tracked as Transparent Tribe, targets Indian entities with a new Windows malware. https://securityaffairs.co/wordpress/117963/apt/transparent-tribe-malware.html | India https://t.me/cKure/7981
May 17, 2021 at 12:14AM
■■■■□ Red-Kube – Red Team K8S Adversary Emulation Based On Kubectl. https://github.com/lightspin-tech/red-kube https://t.me/cKure/7979
May 16, 2021 at 11:08PM
■■□□□ Avaddon Ransomware group hacked France-based Acer Finance and AXA Asia. https://securityaffairs.co/wordpress/117991/cyber-crime/avaddon-ransomware-acer-finance-axa.html https://t.me/cKure/7977
May 16, 2021 at 09:42PM
■■■■■ Dent: A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft’s WDAPT sensors. https://github.com/optiv/Dent https://t.me/cKure/7976
May 16, 2021 at 09:40PM
■■■□□ Two flaws could allow bypassing AMD SEV protection system. https://www.sec.in.tum.de/i20/student-work/code-execution-attacks-against-encrypted-virtual-machines https://securityaffairs.co/wordpress/117981/security/amd-sev-attacks.html https://t.me/cKure/7975
May 16, 2021 at 09:39PM
■■□□□ Branches of insurance giant AXA based in Thailand, Malaysia, Hong Kong, and the Philippines have been struck by a ransomware cyber attack. As seen by BleepingComputer yesterday, the Avaddon ransomware group claimed on their leak site that they had stolen over 3 TB of sensitive data from AXA’s Asian operations. https://t.me/cKure/7974