Tag: 2024-05-24

9 Attack Reports | 133 Vulnerabilities

Attack reports

A Catalog of Hazardous AV Sites – A Tale of Malware Hosting

In mid-April 2024, Trellix Advanced Research Center team members observed multiple fake AV sites hosting highly sophisticated malicious files such as APK, EXE and Inno setup installer that includes Spy and Stealer capabilities.
.net
2024-05-24
Published: May 24, 2024
Downloadable IOCs: 30

UAC-0188: Targeted cyberattacks using SuperOps RMM (CERT-UA#9797)

The joint efforts of CSIRT-NBU and CERT-UA recorded and analyzed a cyber attack aimed at gaining unauthorized remote access to computers of Ukrainian organizations using a legitimate program for remote computer management SuperOps RMM.
2024-05-24
Published: May 24, 2024
Downloadable IOCs: 28

Technical Deep Dive: Understanding the Anatomy of a Cyber Intrusion

This report details a sophisticated cyber intrusion targeting MITRE's research network (NERVE) through the exploitation of Ivanti Connect Secure zero-day vulnerabilities. The threat actor, suspected to be UNC5221, initiated the attack by gaining unauthorized access and subsequently deploying variou…
persistence
CVE-2024-21887
CVE-2023-46805
2024-05-24
threat
lateral movement
wirefire
giftedvisitor
bushwalk
intrusion
cyberattack
beeflush
rootrot
brickstorm
Published: May 24, 2024
Downloadable IOCs: 4

CVE-2024-4978: Backdoored Justice AV Solutions Viewer Software Used in Apparent Supply Chain Attack

Rapid7 discovered that version 8.3.7 of the JAVS Viewer software from Justice AV Solutions contained a backdoor installer allowing attackers to gain remote control over affected systems. The malicious installer included a binary named fffmpeg.exe which executed obfuscated PowerShell scripts and fac…
backdoor
supply chain
CVE-2024-4978
2024-05-24
credential harvesting
installer
stealc infostealer
software
gatedoor/rustdoor
Published: May 24, 2024
Linked vulnerabilities : CVE-2024-4978 (CVSS 8.4)
Downloadable IOCs: 10

CatDDoS-Related Gangs Have Seen a Recent Surge in Activity

CatDDoS-related gangs remain active and have exploited over 80 vulnerabilities over the last three months, with the maximum number of targets exceeding 300+ per day.
2024-05-24
Published: May 24, 2024
Downloadable IOCs: 63

Iluria Stealer; a Variant of Another Discord Stealer

Researchers uncover a new malware variant called Iluria Stealer, created by the developer behind Nikki Stealer, utilizing the alias 'Ykg.' Iluria Stealer is designed to steal Discord tokens, browser credentials, and payment information. It employs techniques like obfuscation, process injection, and…
stealer
2024-05-24
discord
credentials
nikki stealer
iluria stealer
epsilon stealer
Published: May 24, 2024
Downloadable IOCs: 5

Gootloader walkthrough

The analysis delves into the intricate workings of the Gootloader malware campaign. Through a meticulously crafted social engineering scheme involving SEO poisoning and fake forums, threat actors lure unsuspecting victims into downloading a malicious JavaScript file disguised as a legitimate resour…
social engineering
powershell
seo poisoning
javascript
2024-05-24
gootloader
Published: May 24, 2024
Downloadable IOCs: 12

Deep Dive Into Unfading Sea Haze: A New Threat Actor in the South China Sea

An investigation by Bitdefender Labs uncovered a previously unidentified cyber threat actor called Unfading Sea Haze. This group has systematically targeted high-level organizations across countries in the South China Sea region. The extensive analysis spanned several years, revealing their evolvin…
malware
apt
espionage
2024-05-23
.net
dustyexfiltool
2024-05-24
unfading sea haze
silentgh0st
translucentgh0st
sharpjshandler
Published: May 24, 2024
Downloadable IOCs: 47

Transparent Tribe Targets Indian Government, Defense, and Aerospace Sectors Leveraging Cross-Platform Programming Languages

BlackBerry discovered the Pakistani-based advanced persistent threat group Transparent Tribe (APT36) targeting the Indian government, defense, and aerospace sectors. The group employed cross-platform programming languages, open-source tools, and abused web services for command-and-control and exfil…
apt
espionage
2024-05-24
transparent tribe
Published: May 24, 2024
Downloadable IOCs: 97
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-4544

9.8
    Pie Register - Social Sites Login (Add on) plugin for WordPress
    WordPress Pie Register - Social Sites Login (Add on) plugin
Published: May 24, 2024

CVE-2024-5314

9.1
    Dolibarr ERP - CRM
Published: May 24, 2024

CVE-2024-5315

9.1
    Dolibarr ERP - CRM
Published: May 24, 2024

CVE-2024-0867

8.1
    Email Log plugin for WordPress
Published: May 24, 2024

CVE-2024-4455

7.2
    YITH WooCommerce Ajax Search plugin for WordPress
    YITH WooCommerce Ajax Search plugin
Published: May 24, 2024

CVE-2023-49572

7.1
    VX Search Enterprise
Published: May 24, 2024

CVE-2023-49573

7.1
    VX Search Enterprise
Published: May 24, 2024

CVE-2023-49574

7.1
    VX Search Enterprise
Published: May 24, 2024

CVE-2023-49575

7.1
    VX Search Enterprise
Published: May 24, 2024

CVE-2024-4037

6.5
    WP Photo Album Plus plugin for WordPress
Published: May 24, 2024

CVE-2024-5205

6.4
    Videojs HTML5 Player plugin for WordPress
Published: May 24, 2024

CVE-2024-2618

6.4
    Elementor Header & Footer Builder plugin for WordPress
Published: May 24, 2024

CVE-2024-2784

6.4
    The Plus Addons for Elementor plugin for WordPress
Published: May 24, 2024

CVE-2024-3557

6.4
    WP Go Maps plugin for WordPress
    WP Go Maps (formerly WP Google Maps) plugin for WordPress
Published: May 24, 2024

CVE-2024-1134

6.4
    SEOPress - On-site SEO plugin for WordPress
    SEOPress – On-site SEO plugin for WordPress
Published: May 24, 2024

CVE-2024-3718

6.4
    The Plus Addons for Elementor plugin for WordPress
    The Plus Addons for Elementor plugin
Published: May 24, 2024

CVE-2024-1332

6.4
    Custom Fonts - Host Your Fonts Locally plugin for WordPress
    Custom Fonts – Host Your Fonts Locally plugin for WordPress
Published: May 24, 2024

CVE-2024-4484

6.4
    The Plus Addons for Elementor
    The Plus Addons for Elementor plugin
Published: May 24, 2024

CVE-2024-4485

6.4
    The Plus Addons for Elementor
    The Plus Addons for Elementor plugin for WordPress
Published: May 24, 2024

CVE-2024-5060

6.4
    LottieFiles – JSON Based Animation Lottie & Bodymovin for Elementor plugin for WordPress
Published: May 24, 2024

CVE-2024-4366

6.4
    Spectra - WordPress Gutenberg Blocks Plugin
    Spectra - WordPress Gutenberg Blocks plugin for WordPress
Published: May 24, 2024

CVE-2024-5312

6.3
    PHP Server Monitor
Published: May 24, 2024

CVE-2023-47710

5.4
    IBM Security Guardium
Published: May 24, 2024

CVE-2024-4409

4.3
    WP-ViperGB plugin for WordPress
Published: May 24, 2024

CVE-2024-0893

4.3
    Schema App Structured Data plugin for WordPress
Published: May 24, 2024

CVE-2024-1376

4.3
    WordPress Event post plugin
Published: May 24, 2024

CVE-2024-5318

4.0
    GitLab CE/EE
    GitLab CE/EE
Published: May 24, 2024

CVE-2024-35232

3.7
    github.com/huandu/facebook
Published: May 24, 2024

CVE-2023-1001

3.5
    xuliangzhan vxe-table
    vxe-table
Published: May 24, 2024

CVE-2023-1111

2.4
    FastCMS
Published: May 24, 2024

CVE-2023-7259

2.4
    zzdevelop lenosp
Published: May 24, 2024

CVE-2024-5310

2.4
    JFinalCMS
Published: May 24, 2024

CVE-2024-36361

None
    Pug
Published: May 24, 2024

CVE-2024-5142

None
    M-Files Hubshare
Published: May 24, 2024

CVE-2024-35591

None
    O2OA
Published: May 24, 2024

CVE-2024-35592

None
    Box-IM
Published: May 24, 2024

CVE-2024-35593

None
    Raingad IM
Published: May 24, 2024

CVE-2024-35595

None
    Xintongda OA
Published: May 24, 2024

CVE-2024-5273

None
    Jenkins Report Info Plugin
Published: May 24, 2024

CVE-2021-47499

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47500

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47501

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47502

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47503

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47504

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47505

None
    Linux kernel
    Linux kernel
Published: May 24, 2024

CVE-2021-47506

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47507

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47508

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47509

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47510

None
    Linux Kernel (BTRFS module)
    Linux Kernel (BTRFS)
Published: May 24, 2024

CVE-2021-47511

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47512

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47513

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47514

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47515

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47516

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47517

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47518

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47519

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47520

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47521

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47522

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47523

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47524

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47525

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47526

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47527

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47528

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47529

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47530

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47531

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47532

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47533

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47534

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47535

None
    Linux Kernel
Published: May 24, 2024

CVE-2021-47536

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47537

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47538

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47539

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47540

None
    Linux Kernel
Published: May 24, 2024

CVE-2021-47541

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47542

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47543

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47544

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47545

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47546

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47547

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47548

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47549

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47550

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47551

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47552

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47553

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47554

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47555

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47556

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47557

None
    Linux Kernel
Published: May 24, 2024

CVE-2021-47558

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47559

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47560

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47561

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47562

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47563

None
    Linux Kernel
Published: May 24, 2024

CVE-2021-47564

None
    Linux Kernel
    Linux kernel
Published: May 24, 2024

CVE-2021-47565

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47566

None
    Linux Kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47567

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47568

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47569

None
    Linux kernel
    Linux Kernel
Published: May 24, 2024

CVE-2021-47570

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47571

None
    Linux kernel
Published: May 24, 2024

CVE-2021-47572

None
    Linux Kernel
Published: May 24, 2024

CVE-2024-22588

None
    UNKNOWN
    Kwik
Published: May 24, 2024

CVE-2024-31510

None
    Open Quantum Safe liboqs
    liboqs
Published: May 24, 2024

CVE-2024-33470

None
    AVTECH Room Alert 4E
Published: May 24, 2024

CVE-2024-33809

None
    PingCAP TiDB
Published: May 24, 2024

CVE-2024-35339

None
    Tenda FH1206
Published: May 24, 2024

CVE-2024-35340

None
    Tenda FH1206
Published: May 24, 2024

CVE-2024-35618

None
    PingCAP TiDB
Published: May 24, 2024

CVE-2023-52880

None
    Linux kernel
Published: May 24, 2024

CVE-2024-33427

None
    Squid
Published: May 24, 2024

CVE-2024-34995

None
    svnWebUI
Published: May 24, 2024

CVE-2024-35395

None
    TOTOLINK CP900L
    TOTOLINK CP900L
Published: May 24, 2024

CVE-2024-35396

None
    TOTOLINK CP900L
Published: May 24, 2024

CVE-2023-46442

None
    Soot
Published: May 24, 2024

CVE-2024-36049

None
    Aptos Wisal payroll accounting
Published: May 24, 2024

CVE-2024-35387

None
    TOTOLINK LR350
Published: May 24, 2024

CVE-2024-33471

None
    AVTECH Room Alert 4E
Published: May 24, 2024

CVE-2024-35388

None
    TOTOLINK NR1800X
Published: May 24, 2024

CVE-2024-35373

None
    Mocodo Online
Published: May 24, 2024

CVE-2024-35374

None
    Mocodo Online
Published: May 24, 2024

CVE-2024-36079

None
    Vaultize
Published: May 24, 2024
Click here to see more Vulnerabilities