Compromised Website Images Camouflage ObliqueRAT Malware
.
The ObliqueRAT malware is now cloaking its payloads as seemingly-innocent image files that are hidden on compromised websites.
Similar Posts
DOD Expands Hacker Program to All Publicly Accessible Defense Information Systems > U.S. DEPARTMENT OF DEFENSE > Defense Department News
Ethical hackers now have many more targets within the Defense Department, DOD officials announced. The department is expanding its Vulnerability Disclosure Program to include all publicly accessible DOD information systems. The program grew out of the success of the “Hack the Pentagon” initiative that began in 2016. That initiative enabled the Defense Digital Service…
Fake Netflix App Allows Hackers to Hijack WhatsApp
A newly-discovered Android malware app called FlixOnline promised users access to Netflix content from all around the world on their smartphones before exploiting access to their WhatsApp, according to Check Point Research. Troubling, the app was not solely on third-party app stores – it was, instead, found on the Google Play Store, using Netflix imagery to…
China widens crackdown beyond Didi, roiling global investors
“We must never let any internet giant control a super database that has more detailed personal information than the state, let alone giving it the right to use the data at will,” the paper said in the commentary. While it’s not clear how Didi illegally collected personal data, companies should gather the least amount of…
Attackers scan for vulnerable VMware servers after PoC exploit release
After security researchers have developed and published proof-of-concept (PoC) exploit code targeting a critical vCenter remote code execution (RCE) vulnerability, attackers are now actively scanning for vulnerable Internet-exposed VMware servers. The scanning activity was spotted by threat intelligence company Bad Packets just one day after VMware patched the critical vulnerability. Thousands of unpatched vCenter servers are…
CVE-2021-20454 – Alert Detail – Security Database
Executive Summary Informations Name CVE-2021-20454 First vendor Publication 2021-04-21 Vendor Cve Last vendor Modification 2021-04-21 Security-Database Scoring CVSS v3 Cvss vector : N/A Overall CVSS Score NA Base Score NA Environmental Score NA impact SubScore NA Temporal Score NA Exploitabality Sub Score NA Calculate full CVSS 3.0 Vectors scores Security-Database Scoring CVSS v2 Cvss…
Hackers Behind the Poly Network Cryptocurrency Hack Return The Stolen Funds
Hackers Behind the Poly Network Cryptocurrency Hack Return The Stolen Funds | IT Security News Android App Android App with push notifications Sponsors Endpoint Cybersecurity www.endpoint-cybersecurity.com – Consulting in building your security products– Employee awareness training– Security tests for applications and pentesting… and more. Daily Summary Categories CategoriesSelect Category(ISC)2 Blog (323)(ISC)2 Blog infosec (13)(ISC)² Blog (403)2020-12-08 – Files…