Today > | 6 High | 20 Medium | 11 Low vulnerabilities - You can now download lists of IOCs here!
3 attack reports | 353 vulnerabilities
A threat actor breached the Green Bay Packers' official online retail store in October, injecting a card skimmer script to steal customers' personal and payment information. The attack, discovered on October 23, 2024, targeted the packersproshop.com website. The malicious code, inserted in the chec…
A recent phishing campaign has been observed delivering Formbook stealers through email attachments. The malware uses multiple stages and steganography to hide malicious files inside images. The infection chain involves three stages before the final payload: Purchase Order.exe, Arthur.dll, and Mont…
A cryptocurrency mining campaign targeting vulnerable PHP servers has been identified. The attack exploits misconfigured or unpatched servers, allowing unauthorized access to php-cgi.exe. The malware, initially delivered as dr0p.exe, downloads a secondary payload pkt1.exe, which then spawns packetc…