Tag: 2025-01-17

8 Attack Reports | 92 Vulnerabilities

Attack reports

Threat Research Report: Malicious Domain Activity During the Los Angeles Wildfires

During the 2025 Los Angeles wildfires, cybercriminals exploited the disaster through various phishing campaigns. Analysis of 119 domains registered between January 8-13, 2025, revealed themes targeting emergency assistance, legal services, and reconstruction efforts. GoDaddy was the most used regis…
phishing
social engineering
2025-01-17
natural disaster exploitation
los angeles wildfires
Published: January 17, 2025
Downloadable IOCs: 119

IoT Botnet Linked to Large-scale DDoS Attacks Since the End of 2024

An IoT botnet has been orchestrating large-scale DDoS attacks globally since late 2024, targeting companies in Japan and other countries. The botnet, comprising Mirai and Bashlite variants, infects IoT devices by exploiting vulnerabilities and weak credentials. It uses various DDoS attack methods, …
ddos
iot
botnet
mirai
bashlite
2025-01-17
ip cameras
Published: January 17, 2025
Downloadable IOCs: 0

Gootloader Inside Out

The report details an analysis of the Gootloader malware family, which uses malicious SEO tactics to infect computers. It explains how Gootloader compromises legitimate WordPress sites, manipulates search results, and presents visitors with a fake online forum to distribute malware. The analysis re…
2025-01-17
malicious seo
wordpress compromise
jscript payload
php shell
fake forum
Published: January 17, 2025
Downloadable IOCs: 12

Will the Real Volt Typhoon Please Stand Up?

This analysis tracks the evolution of the KV Botnet, attributed to the Volt Typhoon threat group, following FBI disruption in December 2023. Despite sophisticated operations, the botnet's infrastructure remained largely consistent, only changing hosting providers. The JDY cluster, targeting Cisco r…
china
critical infrastructure
2025-01-17
kv botnet
jdy cluster
cisco routers
Published: January 17, 2025
Downloadable IOCs: 9

Threat Brief: CVE-2025-0282 and CVE-2025-0283

Two critical vulnerabilities in Ivanti Connect Secure, Policy Secure and ZTA gateway products have been discovered. CVE-2025-0282 allows remote code execution, while CVE-2025-0283 enables privilege escalation. Attacks exploiting CVE-2025-0282 have been observed in the wild, involving initial access…
ivanti
CVE-2025-0282
CVE-2025-0283
2025-01-17
Published: January 17, 2025
Downloadable IOCs: 14

Sneaky 2FA: exposing a new AiTM Phishing-as-a-Service

A new Adversary-in-the-Middle (AiTM) phishing kit called Sneaky 2FA has been discovered targeting Microsoft 365 accounts. The kit is sold as Phishing-as-a-Service by a cybercrime service called Sneaky Log, which operates via a Telegram bot. Sneaky 2FA uses anti-bot and anti-analysis features, authe…
obfuscation
phishing
aitm
cryptocurrency
telegram
2025-01-17
Published: January 17, 2025
Downloadable IOCs: 26

New Star Blizzard spear-phishing campaign targets WhatsApp accounts

Star Blizzard, a Russian threat actor, has launched a new spear-phishing campaign targeting WhatsApp accounts. The campaign, observed in mid-November 2024, marks a shift in the actor's tactics. Targets include government officials, diplomats, and researchers focused on Russia-related topics. The at…
social engineering
whatsapp
credential theft
government targets
spear-phishing
2025-01-17
diplomacy targets
qr code
russian threat actor
Published: January 17, 2025
Downloadable IOCs: 2

Play Ransomware impersonates SentinelOne for stealth recon

A Play ransomware attack involving a reconnaissance tool called Grixba was detected and prevented. The attack began with the deployment of Grixba via RDP to a Windows server. The Grixba file was disguised as legitimate SentinelOne software, a new tactic for the group. Grixba is an obfuscated .NET-b…
obfuscation
ransomware
.net
rdp
reconnaissance
grixba
play
2025-01-17
sentinelone impersonation
xor encryption
Published: January 17, 2025
Downloadable IOCs: 4
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-57031

9.8
    WeGIA
  • Version(s): < 3.2.0
Published: January 17, 2025

CVE-2024-57032

9.8
    WeGIA
  • Version(s): < 3.2.0
Published: January 17, 2025

CVE-2024-57034

9.8
    WeGIA
  • Version(s): < 3.2.0
Published: January 17, 2025

CVE-2024-57035

9.8
    WeGIA
  • Version(s): 3.2.0
Published: January 17, 2025

CVE-2024-10497

8.8
    UNKNOWN
Published: January 17, 2025

CVE-2024-12142

8.6
    UNKNOWN
Published: January 17, 2025

CVE-2024-12757

8.6
    Nedap Librix Ecoreader
Published: January 17, 2025

CVE-2024-57030

8.1
    Wegia
  • Version(s): < 3.2.0
Published: January 17, 2025

CVE-2024-34579

7.8
    Fuji Electric Alpha5 SMART
Published: January 17, 2025

CVE-2025-21325

7.8
    Microsoft
  • Windows 10 21h2
  • Windows 10 22h2
  • Windows 11 22h2
  • Windows 11 23h2
  • Windows 11 24h2
  • Windows Server 2025
Published: January 17, 2025

CVE-2024-12476

7.8
    Web Designer configuration tool
Published: January 17, 2025

CVE-2024-12703

7.8
    UNKNOWN
Published: January 17, 2025

CVE-2018-9375

7.8
    Android
Published: January 17, 2025

CVE-2018-9382

7.8
    Android
Published: January 17, 2025

CVE-2018-9434

7.8
    UNKNOWN
Published: January 17, 2025

CVE-2024-13333

7.5
    WordPress Advanced File Manager plugin
  • Version(s): 5.2.12, 5.2.13
Published: January 17, 2025

CVE-2024-11425

7.5
    UNKNOWN
Published: January 17, 2025

CVE-2025-0430

7.5
    Linphone-Desktop
  • Version(s): UNKNOWN
Published: January 17, 2025

CVE-2024-26153

7.4
    ETIC Telecom Remote Access Server (RAS)
  • Version(s): before 4.9.19
Published: January 17, 2025

CVE-2025-21399

7.4
    Microsoft Edge (Chromium-based)
Published: January 17, 2025

CVE-2024-11146

7.3
    TrueFiling
  • Version(s): before 3.1.112.19
Published: January 17, 2025

CVE-2025-0527

7.3
    code-projects Admission Management System
  • Version(s): 1.0
Published: January 17, 2025

CVE-2025-0533

7.3
    1000 Projects Campaign Management System Platform for Women
  • Version(s): 1.0
Published: January 17, 2025

CVE-2025-0534

7.3
    1000 Projects Campaign Management System Platform for Women
  • Version(s): 1.0
Published: January 17, 2025

CVE-2025-23208

7.3
    Zot
  • Version(s): 2.1.2
Published: January 17, 2025

CVE-2024-13377

7.2
    Gravity Forms plugin for WordPress
  • Version(s): up to 2.9.1.3
Published: January 17, 2025

CVE-2025-0528

7.2
    Tenda AC8, AC10, AC18
  • Version(s): 16.03.10.20
Published: January 17, 2025

CVE-2024-12399

7.1
    UNKNOWN
Published: January 17, 2025

CVE-2024-52870

7.1
    Teradata Vantage Editor
  • Version(s): 1.0.1
Published: January 17, 2025

CVE-2024-26155

6.8
    ETIC Telecom Remote Access Server (RAS)
  • Version(s): before 4.5.0
Published: January 17, 2025

CVE-2024-52363

6.5
    IBM InfoSphere Information Server
  • Version(s): 11.7
Published: January 17, 2025

CVE-2024-10799

6.5
    Eventer plugin for WordPress
  • Version(s): up to 3.9.7
Published: January 17, 2025

CVE-2024-13367

6.5
    WordPress Sandbox plugin
  • Version(s): 0.1 - 0.4
Published: January 17, 2025

CVE-2024-10498

6.5
    Modbus Protocol Implementation
Published: January 17, 2025

CVE-2024-50967

6.5
    Becon DATAGerry
  • Version(s): up to 2.2.0
Published: January 17, 2025

CVE-2025-21185

6.5
    Microsoft
  • Edge Chromium
Published: January 17, 2025

CVE-2024-13398

6.4
    Checkout for PayPal plugin for WordPress
  • Version(s): up to 1.0.32
Published: January 17, 2025

CVE-2024-13401

6.4
    Payment Button for PayPal plugin for WordPress
  • Version(s): up to 1.2.3.35
Published: January 17, 2025

CVE-2024-12508

6.4
    Glofox Shortcodes plugin for WordPress
  • Version(s): up to 2.6
Published: January 17, 2025

CVE-2024-12598

6.4
    MyBookProgress by Stormhill Media plugin for WordPress
  • Version(s): up to, and including, 1.0.8
Published: January 17, 2025

CVE-2024-13386

6.4
    quote-posttype-plugin for WordPress
  • Version(s): up to 1.2.2
Published: January 17, 2025

CVE-2024-57369

6.4
    typecho
  • Version(s): 1.2.1
Published: January 17, 2025

CVE-2025-0531

6.3
    code-projects Chat System
  • Version(s): 1.0
Published: January 17, 2025

CVE-2025-0532

6.3
    Codezips Gym Management System
  • Version(s): 1.0
Published: January 17, 2025

CVE-2025-0535

6.3
    Codezips Gym Management System
  • Version(s): 1.0
Published: January 17, 2025

CVE-2025-0536

6.3
    1000 Projects Attendance Tracking Management System
  • Version(s): 1.0
Published: January 17, 2025

CVE-2025-0540

6.3
    Angeljudesuarez
  • Tailoring Management System
Published: January 17, 2025

CVE-2025-0541

6.3
    Codezips Gym Management System
  • Version(s): 1.0
Published: January 17, 2025

CVE-2025-23207

6.3
    KaTeX
  • Version(s): < 0.16.21
Published: January 17, 2025

CVE-2024-13434

6.1
    WP Inventory Manager plugin for WordPress
  • Version(s): up to 2.3.2
Published: January 17, 2025

CVE-2024-12466

6.1
    Proofreading plugin for WordPress
  • Version(s): 1.2.1.1 and earlier
Published: January 17, 2025

CVE-2024-13366

6.1
    WordPress Sandbox plugin
  • Version(s): up to 0.4
Published: January 17, 2025

CVE-2024-26157

6.1
    ETIC Telecom Remote Access Server (RAS)
  • Version(s): before 4.5.0
Published: January 17, 2025

CVE-2024-57370

6.1
    sunnygkp10 Online Exam System master version
Published: January 17, 2025

CVE-2024-57372

6.1
    InformationPush
  • Version(s): master version
Published: January 17, 2025

CVE-2024-57033

6.1
    WeGIA
  • Version(s): UNKNOWN
Published: January 17, 2025

CVE-2017-13322

5.5
    Google
  • Android
Published: January 17, 2025

CVE-2018-9379

5.5
    Android Operating System
Published: January 17, 2025

CVE-2018-9447

5.5
    Android
Published: January 17, 2025

CVE-2024-13378

5.4
    Gravity Forms plugin for WordPress
  • Version(s): 2.9.0.1, 2.9.1.3
Published: January 17, 2025

CVE-2024-12637

5.3
    WordPress Moving Users plugin
  • Version(s): up to 1.05
Published: January 17, 2025

CVE-2024-12370

5.3
    Thimpress
  • Wp Hotel Booking
Published: January 17, 2025

CVE-2025-0529

5.3
    Train Ticket Reservation System
  • Version(s): 1.0
Published: January 17, 2025

CVE-2025-23039

5.2
    Caido
  • Version(s): 0.45.0
Published: January 17, 2025

CVE-2024-26154

4.8
    ETIC Telecom Remote Access Server (RAS)
  • Version(s): before 4.5.0
Published: January 17, 2025

CVE-2024-26156

4.8
    ETIC Telecom Remote Access Server (RAS)
  • Version(s): before 4.5.0
Published: January 17, 2025

CVE-2024-12203

4.4
    WordPress RSS Icon Widget plugin
  • Version(s): up to 5.2
Published: January 17, 2025

CVE-2024-53683

4.4
    UNKNOWN
Published: January 17, 2025

CVE-2018-9383

4.4
    Android
Published: January 17, 2025

CVE-2018-9384

4.4
    Android
Published: January 17, 2025

CVE-2024-45832

4.3
    UNKNOWN
Published: January 17, 2025

CVE-2023-50738

4.3
    Lexmark products
Published: January 17, 2025

CVE-2024-57252

4.3
    OtCMS
  • Version(s): <=V7.46
Published: January 17, 2025

CVE-2024-51462

4.0
    IBM QRadar WinCollect Agent
  • Version(s): 10.0.0, 10.1.12
Published: January 17, 2025

CVE-2025-0530

3.5
    code-projects Job Recruitment
  • Version(s): 1.0
Published: January 17, 2025

CVE-2024-54681

3.5
    UNKNOWN
Published: January 17, 2025

CVE-2025-0538

3.5
    Tourism Management System
  • Version(s): 1.0
Published: January 17, 2025

CVE-2025-0537

2.4
    Car Rental Management System
  • Version(s): 1.0
Published: January 17, 2025

CVE-2024-11139

None
    UNKNOWN
Published: January 17, 2025

CVE-2024-13502

None
    Newtec/iDirect NTC2218
  • Version(s): 1.0.1.1 - 2.2.6.19
    Newtec/iDirect NTC2250
  • Version(s): 1.0.1.1 - 2.2.6.19
    Newtec/iDirect NTC2299
  • Version(s): 1.0.1.1 - 2.2.6.19
Published: January 17, 2025

CVE-2024-13503

None
    Newtec NTC2218
  • Version(s): 1.0.1.1 - 2.2.6.19
    Newtec NTC2250
  • Version(s): 1.0.1.1 - 2.2.6.19
    Newtec NTC2299
  • Version(s): 1.0.1.1 - 2.2.6.19
Published: January 17, 2025

CVE-2024-13026

None
    Algo Edge
  • Version(s): up to 2.1.1
Published: January 17, 2025

CVE-2025-21606

None
    Stats macOS system monitor
  • Version(s): 2.11.21+
Published: January 17, 2025

CVE-2025-23202

None
    Bible Module for ROBLOX
  • Version(s): 0.0.3
Published: January 17, 2025

CVE-2025-23205

None
    nbgrader
  • Version(s): 0.9.5 and above
Published: January 17, 2025

CVE-2025-23206

None
    AWS Cloud Development Kit (AWS CDK)
  • Version(s): 2.177.0
Published: January 17, 2025

CVE-2020-0402

None
    UNKNOWN
Published: January 17, 2025

CVE-2021-0323

None
    UNKNOWN
Published: January 17, 2025

CVE-2021-0447

None
    UNKNOWN
Published: January 17, 2025

CVE-2021-21158

None
    UNKNOWN
Published: January 17, 2025

CVE-2022-0303

None
    UNKNOWN
Published: January 17, 2025

CVE-2022-20128

None
    UNKNOWN
Published: January 17, 2025
Click here to see more Vulnerabilities