Tag: 2024-11-02

3 Attack Reports | 12 Vulnerabilities

Attack reports

Booking.com Phishers May Leave You With Reservations

A recent spear-phishing campaign targeted a California hotel after its Booking.com credentials were stolen. The scam involved sending targeted messages within the Booking mobile app, claiming additional information was required for anti-fraud purposes. Booking.com confirmed a security incident affe…
phishing
credential theft
cybercrime
2024-11-02
2fa
hospitality
booking.com
travel
Published: November 2, 2024
Downloadable IOCs: 0

LastPass Warns of Hackers Misusing Reviews for Fake Support Numbers

LastPass has alerted users about a social engineering campaign targeting customers through fraudulent 5-star reviews on the Chrome Web Store. Hackers are posting fake reviews for the LastPass Chrome extension, promoting a bogus customer support phone number to steal user data. When users call this …
phishing
social engineering
2024-11-02
lastpass
password management
chrome web store
fake reviews
Published: November 2, 2024
Downloadable IOCs: 0

EDR Bypass Testing Reveals Extortion Actor's Toolkit

Unit 42 investigated an extortion attempt where threat actors tested an AV/EDR bypass tool on rogue systems with Cortex XDR installed. The actors purchased network access via Atera RMM and used a BYOVD technique for the bypass tool. Researchers gained visibility into the actors' systems, uncovering…
extortion
cobalt strike
rclone
mimikatz
conti
sharphound
rubeus
byovd
2024-11-02
cortex xdr
safetykatz
cybercrime forums
threat actor profiling
av/edr bypass
Published: November 2, 2024
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-10698

8.8
    Tenda
  • Ac6 Firmware
  • Ac6
Published: November 2, 2024

CVE-2024-51774

8.1
    Qbittorrent
  • Qbittorrent
Published: November 2, 2024

CVE-2024-10699

7.3
    Anisha
  • Wazifa System
Published: November 2, 2024

CVE-2024-10702

7.3
    Fabinros
  • Simple Car Rental System
Published: November 2, 2024

CVE-2024-10310

6.4
    Bdthemes
  • Element Pack
Published: November 2, 2024

CVE-2024-10697

6.3
    Tenda
  • Ac6 Firmware
  • Ac6
Published: November 2, 2024

CVE-2024-10700

6.3
    Anisha
  • University Event Management System
Published: November 2, 2024

CVE-2024-8739

6.1
    Wedevs
  • Recaptcha Integration
Published: November 2, 2024

CVE-2024-9896

6.1
    Spider-Themes
  • Bbp Core
Published: November 2, 2024

CVE-2024-9868

5.4
    Bdthemes
  • Element Pack
Published: November 2, 2024

CVE-2024-10540

5.3
    Reputeinfosystems
  • Bookingpress
Published: November 2, 2024

CVE-2024-10701

3.5
    Phpgurukul
  • Car Rental Portal
Published: November 2, 2024
Click here to see more Vulnerabilities