All posts by cK-bot

■■■■□ The Javascript-based infection framework for the Gootkit RAT was enhanced to deliver a wider variety of malware, including ransomware. https://securityaffairs.co/wordpress/115144/cyber-crime/gootkit-gootloader-evolution.html https://t.me/cKure/7015

■■■□□ #DataLeak: In January 2021, Oxfam Australia was the victim of a data breach which exposed 1.8M unique email addresses of supporters of the charity. The data was put up for sale on a popular hacking forum and also included names, phone numbers, addresses, genders and dates of birth. A small number of people also had partial…

■■□□□ In August 2020, the Dutch (#Netherlands ) ticketing service Ticketcounter inadvertently published a database backup to a publicly accessible location where it was then found and downloaded in February 2021 (unsecured staging server). The data contained 1.9M unique email addresses which were offered for sale on a hacking forum alongside names, physical and IP…

■□□□□ Crypto firm Tether claims hackers have demanded $24m in ransom. https://www.hackread.com/tether-cryptocurrency-firm-hackers-hit-ransom/ https://t.me/cKure/7012

■■□□□ Halogen – Automatically Create YARA Rules From Malicious Documents. https://github.com/target/halogen https://www.kitploit.com/2021/03/halogen-automatically-create-yara-rules.html https://t.me/cKure/7011

■□□□□ Windows’ tweaks. https://www.howtogeek.com/715225/change-default-new-folder-name-windows-10/ https://t.me/cKure/7010

■■■■□ CVE-2021-1782: Hackers release a new jailbreak tool for almost every iPhone. https://techcrunch.com/2021/03/01/hackers-unc0ver-jailbreak-iphone/ https://t.me/cKure/7009

■■■■□ Working Windows and Linux Spectre exploits found on VirusTotal. https://www.bleepingcomputer.com/news/security/working-windows-and-linux-spectre-exploits-found-on-virustotal/ https://t.me/cKure/7008

■■□□□ CVE-2021-27215 #1Day: Cybersecurity firm Genua fixes a critical flaw in its GenuGate High Resistance Firewall, allowing attackers to log in as root users. Authentication Bypass via HTTP parameter tampering. Firewall Vendor Patches Critical Auth Bypass Flaw https://t.me/cKure/7007

■■□□□ #India / #China Malware attack that crippled Mumbai’s power system came from China, claims infosec firm Recorded Future. https://go.theregister.com/feed/www.theregister.com/2021/03/01/statesponsored_chinese_group_attacked_india/ https://t.me/cKure/7006