Tag: 2024-10-04

7 Attack Reports | 90 Vulnerabilities

Attack reports

Pig Butchering Alert: Fraudulent Trading App targeted iOS and Android users

A large-scale fraud campaign involving fake trading apps targeting Apple iOS and Android users across multiple regions has been uncovered. The apps, developed using the UniApp framework, were distributed through official app stores and phishing sites. Unlike conventional mobile trojans, these apps …
ios
social engineering
android
cross-platform
2024-10-04
pig butchering
uniapp
fraudulent trading apps
unishadowtrade
goldpickaxe
Published: October 4, 2024
Downloadable IOCs: 9

Tweaking AsyncRAT: Using Python and TryCloudflare to Deploy Malware

A new AsyncRAT malware campaign utilizes TryCloudflare quick tunnels and Python packages to deliver malicious payloads. The attack chain involves HTML attachments with 'search-ms' URI protocol handlers, leading to LNK files that download BAT files. These BAT files then retrieve and execute Python s…
obfuscation
xworm
phishing
python
powershell
asyncrat
webdav
2024-10-04
shellcode injection
trycloudflare
Published: October 4, 2024
Downloadable IOCs: 15

CHARMING KITTEN

Since June 2024, the Iran-nexus actor CHARMING KITTEN has been creating new network infrastructure for credential phishing, targeting individuals perceived as threats to the Iranian regime. The actor's infrastructure, known as Cluster B, uses domains with specific characteristics like similar TLDs,…
iran
infrastructure
domain registration
2024-10-04
spear-phishing
credential phishing
mint sandstorm
ta453
apt42
Published: October 4, 2024
Downloadable IOCs: 11

Bulbature, beneath the waves of GobRAT

This report examines an infrastructure used to control compromised edge devices transformed into Operational Relay Boxes for launching cyber attacks. The infrastructure, consisting of 63 identified servers, uses GobRAT and Bulbature malware to compromise devices and create a botnet. Features includ…
china
ddos
botnet
proxy
2024-10-04
gobrat
orb
edge devices
bulbature
Published: October 4, 2024
Downloadable IOCs: 120

perfctl: A Stealthy Malware Targeting Millions of Linux Servers

A sophisticated Linux malware named 'perfctl' has been actively targeting millions of servers worldwide for the past 3-4 years. It exploits over 20,000 types of misconfigurations to compromise Linux systems. The malware employs advanced evasion techniques, including rootkits, process masquerading, …
linux
rootkit
evasion
privilege-escalation
persistence
cryptomining
CVE-2023-33246
2024-10-04
tor
CVE-2021-4043
proxy-jacking
perfctl
Published: October 4, 2024
Downloadable IOCs: 9

Threat actor believed to be spreading new MedusaLocker variant since 2022

A financially motivated threat actor has been active since 2022, delivering a MedusaLocker ransomware variant called 'BabyLockerKZ'. The group targets organizations worldwide, with a focus shift from EU countries to South American countries in mid-2023. The actor uses a combination of publicly know…
iab
ransomware
credential theft
lateral movement
financially motivated
2024-10-04
babylockerkz
medusalocker
Published: October 4, 2024
Downloadable IOCs: 11

Threat Brief: Understanding Akira Ransomware

Akira is a prolific ransomware operating since March 2023, targeting multiple industries in North America, the UK, and Australia. It functions as Ransomware as a Service (RaaS) and employs double extortion tactics. Akira has connections to the disbanded Conti group, sharing code similarities and op…
ransomware
lateral movement
conti
akira
raas
2024-10-04
double extortion
defense evasion
CVE-2023-20269
chacha encryption
CVE-2019-6693
credential dumping
CVE-2021-21972
CVE-2022-40684
Published: October 4, 2024
Downloadable IOCs: 3
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-47656

9.8
    Shilpisoft
  • Client Dashboard
Published: October 4, 2024

CVE-2023-26770

9.8
    TaskCafe
  • Version(s): 0.3.2
Published: October 4, 2024

CVE-2024-43685

9.8
    Microchip
  • Timeprovider 4100 Firmware
  • Timeprovider 4100
Published: October 4, 2024

CVE-2024-47655

8.8
    Shilpisoft
  • Client Dashboard
Published: October 4, 2024

CVE-2024-9514

8.8
    Dlink
  • Dir-605l Firmware
  • Dir-605l
Published: October 4, 2024

CVE-2024-9515

8.8
    Dlink
  • Dir-605l Firmware
  • Dir-605l
Published: October 4, 2024

CVE-2024-41512

8.8
    CADClick
  • Version(s): 1.11.0 and before
Published: October 4, 2024

CVE-2024-43684

8.8
    Microchip
  • Timeprovider 4100 Firmware
  • Timeprovider 4100
Published: October 4, 2024

CVE-2024-9054

8.8
    Microchip
  • Timeprovider 4100 Firmware
  • Timeprovider 4100
Published: October 4, 2024

CVE-2024-37868

8.8
    Emiloimagtolis
  • Online Discussion Forum
Published: October 4, 2024

CVE-2024-37869

8.8
    Emiloimagtolis
  • Online Discussion Forum
Published: October 4, 2024

CVE-2024-47652

8.1
    Shilpisoft
  • Client Dashboard
Published: October 4, 2024

CVE-2024-47183

8.1
    Parse Server
  • Version(s): 6.5.9, 7.3.0
Published: October 4, 2024

CVE-2024-46486

8.0
    TP-LINK TL-WDR5620
  • Version(s): 2.3
Published: October 4, 2024

CVE-2024-47850

7.5
    CUPS cups-browsed
  • Version(s): before 2.5b1
Published: October 4, 2024

CVE-2024-47654

7.5
    Shilpisoft
  • Client Dashboard
Published: October 4, 2024

CVE-2024-47769

7.5
    IDURAR
Published: October 4, 2024

CVE-2024-38040

7.5
    Esri
  • Portal For Arcgis
Published: October 4, 2024

CVE-2024-46078

7.5
    itsourcecode Sports Management System Project
  • Version(s): 1.0
Published: October 4, 2024

CVE-2024-47910

7.2
    SonarQube
  • Version(s): before 9.9.5, before 10.5
Published: October 4, 2024

CVE-2024-47911

6.7
    SonarSource SonarQube
  • Version(s): 10.4, 10.5 before 10.6
Published: October 4, 2024

CVE-2024-47651

6.5
    Shilpi
  • Client Dashboard
Published: October 4, 2024

CVE-2024-47653

6.5
    Shilpisoft
  • Client Dashboard
Published: October 4, 2024

CVE-2024-47657

6.5
    Shilpisoft
  • Net Back Office
Published: October 4, 2024

CVE-2023-26771

6.5
    Taskcafe
  • Version(s): 0.3.2
Published: October 4, 2024

CVE-2024-7801

6.5
    Microchip
  • Timeprovider 4100 Firmware
  • Timeprovider 4100
Published: October 4, 2024

CVE-2024-6442

6.3
    UNKNOWN
Published: October 4, 2024

CVE-2024-6443

6.3
    Zephyr Project
Published: October 4, 2024

CVE-2024-6444

6.3
    Zephyr Project
Published: October 4, 2024

CVE-2024-8802

6.1
    Clio
  • Clio Grow
Published: October 4, 2024

CVE-2024-9204

6.1
    Nerdpress
  • Smart Custom 404 Error Page
Published: October 4, 2024

CVE-2024-9237

6.1
    Wp-Centrics
  • Fish And Ships
Published: October 4, 2024

CVE-2024-9345

6.1
    Tychesoftwares
  • Product Delivery Date For Woocommerce
Published: October 4, 2024

CVE-2024-9349

6.1
    Michaeluno
  • Auto Amazon Links
Published: October 4, 2024

CVE-2024-9353

6.1
    Themes4wp
  • Popularis Extra
Published: October 4, 2024

CVE-2024-9375

6.1
    Techbanker
  • Captcha Bank
Published: October 4, 2024

CVE-2024-9384

6.1
    Wpfactory
  • Quantity Dynamic Pricing \& Bulk Discounts For Woocommerce
Published: October 4, 2024

CVE-2024-47854

6.1
    Veritas Data Insight
  • Version(s): before 7.1
Published: October 4, 2024

CVE-2024-9435

6.1
    Plainware
  • Shiftcontroller
Published: October 4, 2024

CVE-2024-25691

6.1
    Esri
  • Portal For Arcgis
Published: October 4, 2024

CVE-2024-38037

6.1
    Esri
  • Portal For Arcgis
Published: October 4, 2024

CVE-2024-38038

6.1
    Esri
  • Portal For Arcgis
Published: October 4, 2024

CVE-2024-8148

6.1
    Esri Portal for ArcGIS
  • Version(s): 10.8.1 - 11.2
Published: October 4, 2024

CVE-2024-43683

6.1
    Microchip
  • Timeprovider 4100 Firmware
  • Timeprovider 4100
Published: October 4, 2024

CVE-2024-43686

6.1
    Microchip
  • Timeprovider 4100 Firmware
  • Timeprovider 4100
Published: October 4, 2024

CVE-2024-43687

6.1
    Microchip
  • Timeprovider 4100 Firmware
  • Timeprovider 4100
Published: October 4, 2024

CVE-2024-44439

5.9
    Shanghai Zhouma Network Technology CO., Ltd IMS Intelligent Manufacturing Collaborative Internet of Things System
  • Version(s): 1.9.1
Published: October 4, 2024

CVE-2024-44204

5.5
    Apple
  • Ipados
  • Iphone Os
Published: October 4, 2024

CVE-2024-8519

5.4
    Ultimatemember
  • Ultimate Member
Published: October 4, 2024

CVE-2024-9368

5.4
    Miguelmello
  • Aggregator Advanced Settings
Published: October 4, 2024

CVE-2024-9372

5.4
    Wpblockshub
  • Wp Blocks Hub
Published: October 4, 2024

CVE-2024-9421

5.4
    Prontotools
  • Login Logout Shortcode
Published: October 4, 2024

CVE-2024-9445

5.4
    Acekyd
  • Display Medium Posts
Published: October 4, 2024

CVE-2024-8804

5.4
    Davidartiss
  • Code Embed
Published: October 4, 2024

CVE-2024-9242

5.4
    Memberful
  • Memberful
Published: October 4, 2024

CVE-2024-9071

5.4
    Sigmadevs
  • Easy Demo Importer
Published: October 4, 2024

CVE-2024-9271

5.4
    Remilia
  • Re\
Published: October 4, 2024

CVE-2024-46409

5.4
    SeedDMS
  • Version(s): 6.0.28
Published: October 4, 2024

CVE-2024-38036

5.4
    Esri
  • Portal For Arcgis
Published: October 4, 2024

CVE-2024-38039

5.4
    Esri
  • Portal For Arcgis
Published: October 4, 2024

CVE-2024-41513

5.4
    CADClick
  • Version(s): 1.11.0, before 1.11.0
Published: October 4, 2024

CVE-2024-41514

5.4
    CADClick
  • Version(s): 1.11.0, before
Published: October 4, 2024

CVE-2024-41515

5.4
    CADClick
  • Version(s): <= 1.11.0
Published: October 4, 2024

CVE-2024-41516

5.4
    CADClick
  • Version(s): <= 1.11.0
Published: October 4, 2024

CVE-2024-46077

5.4
    Online Tours and Travels Management System
  • Version(s): 1.0
Published: October 4, 2024

CVE-2024-9410

5.3
    UNKNOWN
Published: October 4, 2024

CVE-2024-9481

5.1
    AVG/Avast Antivirus
  • Version(s): <24092400
Published: October 4, 2024

CVE-2024-9482

5.1
    Avast Antivirus
  • Version(s): <24092400
Published: October 4, 2024

CVE-2024-9483

5.1
    AVG/Avast Antivirus
  • Version(s): <24092400 released on 24/Sep/2024
Published: October 4, 2024

CVE-2024-9484

5.1
    AVG/Avast Antivirus
  • Version(s): <24092400
Published: October 4, 2024

CVE-2024-9306

4.8
    Wpbookingcalendar
  • Wp Booking Calendar
Published: October 4, 2024

CVE-2024-25694

4.8
    Esri
  • Portal For Arcgis
Published: October 4, 2024

CVE-2024-25701

4.8
    Esri
  • Portal For Arcgis
Published: October 4, 2024

CVE-2024-25702

4.8
    Esri
  • Portal For Arcgis
Published: October 4, 2024

CVE-2024-25707

4.8
    Esri
  • Portal For Arcgis
    Linux
    Microsoft
Published: October 4, 2024

CVE-2024-8499

4.7
    Checkout Field Editor (Checkout Manager) for WooCommerce plugin
  • Version(s): up to 2.0.3
Published: October 4, 2024

CVE-2024-8149

4.6
    Esri Portal for ArcGIS
  • Version(s): 11.1, 11.2
Published: October 4, 2024

CVE-2024-44207

4.3
    Apple
  • Ipados
  • Iphone Os
Published: October 4, 2024

CVE-2024-8520

4.3
    Ultimatemember
  • Ultimate Member
Published: October 4, 2024

CVE-2024-41511

3.9
    CADClick
  • Version(s): 1.11.0 and before
Published: October 4, 2024

CVE-2024-9513

3.7
    NetAdmin IAM
  • Version(s): up to 3.5
Published: October 4, 2024

CVE-2024-47855

None
    JSON-lib
  • Version(s): before 3.1.0
Published: October 4, 2024

CVE-2024-6400

None
    Finrota Netahsilat
  • Version(s): 1.21.10, 1.23.01, 1.23.08, 1.23.11, 1.24.03
Published: October 4, 2024

CVE-2024-47789

None
    D3D Security IP Camera
Published: October 4, 2024

CVE-2024-47790

None
    D3D Security IP Camera
  • Version(s): UNSUPPORTED
Published: October 4, 2024

CVE-2024-47765

None
    Minecraft MOTD Parser
  • Version(s): 1.0.6
Published: October 4, 2024

CVE-2024-47768

None
    Lif Authentication Server
  • Version(s): 1.7.3
Published: October 4, 2024

CVE-2024-47211

None
    OpenStack Ironic
  • Version(s): before 21.4.4, 22.x before 23.0.3, 23.x before 24.1.3, 25.x before 26.1.0
Published: October 4, 2024

CVE-2024-47764

None
    cookie
  • Version(s): 0.7.0
Published: October 4, 2024

CVE-2024-47913

None
    MediaWiki
  • Version(s): 1.1.0 - 1.39.9, 1.40.0 - 1.40.8, 1.41.0 - 1.41.2, 1.42.0 - 1.42.1
Published: October 4, 2024
Click here to see more Vulnerabilities