Tag: 2025-01-22

9 Attack Reports | 177 Vulnerabilities

Attack reports

Targeted supply chain attack against Chrome browser extensions

In December 2024, a threat actor successfully compromised around a dozen legitimate Chrome browser extensions by exploiting extension developers' permissions gained through phishing attacks. The malicious code injected into the compromised extensions aimed to harvest sensitive user data like API ke…
phishing
supply chain
credentials
browser extensions
2025-01-22
data harvesting
Published: January 22, 2025
Downloadable IOCs: 80

Supply chain of Korean VPN service compromised

ESET researchers have uncovered a supply-chain attack against a South Korean VPN provider by a previously unknown China-aligned APT group named PlushDaemon. The attackers replaced the legitimate VPN installer with a malicious version that deployed their SlowStepper backdoor, a feature-rich implant …
backdoor
supply-chain
apt
espionage
china
south korea
vpn
2025-01-22
slowstepper
Published: January 22, 2025
Downloadable IOCs: 0

Protecting Against the Exploited CVEs in the Cleo Data Theft Attacks

The Clop ransomware group has exploited critical vulnerabilities in Cleo's managed file transfer software, specifically CVE-2024-50623 and CVE-2024-55956. These vulnerabilities allow unrestricted file upload/download and execution of arbitrary commands. Imperva has observed over 1 million exploitat…
ransomware
powershell
data theft
extortion
persistence
CVE-2024-50623
CVE-2024-55956
2025-01-22
clop
file transfer
Published: January 22, 2025
Downloadable IOCs: 2

The ticket that doesn't exist: a new threat discovered - FakeTicketer

A new threat actor named FakeTicketer has been identified by F.A.C.C.T. Threat Intelligence, operating since June 2024 with a focus on espionage. The actor targets government officials and sports functionaries using malicious software disguised as tickets for Russian Premier League football matches…
espionage
rat
phishing
stealer
dropper
government
2025-01-22
sports
zagrebator
zagrebator.stealer
zagrebator.dropper
zagrebator.rat
Published: January 22, 2025
Downloadable IOCs: 0

Mass Campaign of Murdoc Botnet Mirai: A New Variant of Corona Mirai

The Qualys Threat Research Unit has uncovered a large-scale operation within the Mirai campaign, dubbed Murdoc Botnet. This variant exploits vulnerabilities in AVTECH Cameras and Huawei HG532 routers, demonstrating enhanced capabilities to compromise devices and establish expansive botnet networks.…
iot
botnet
mirai
2025-01-22
murdoc botnet
Published: January 22, 2025
Downloadable IOCs: 0

Qbot is Back.Connect

Qbot, an information stealer active since 2007, has re-emerged after a law enforcement disruption in May 2024. New research reveals connections between Qbot, Zloader, and BlackBasta ransomware. A new backConnect malware, likely developed by Qbot operators, uses DLL side-loading techniques and RC4 e…
qakbot
qbot
quackbot
2025-01-22
Published: January 22, 2025
Downloadable IOCs: 0

Zyxel vulnerability exploited by 'Helldown' ransomware group

The article details a cybersecurity incident where the "Helldown" ransomware group exploited a vulnerability in Zyxel firewall devices. The attackers gained administrator access to the firewall console, collected domain credentials, and compromised the infrastructure. They used VPN services to mask…
ransomware
vulnerability
2025-01-22
zyxel
Published: January 22, 2025
Downloadable IOCs: 0

APT-C-26 (Lazarus) continues to upgrade its attack weapons, using Electron programs to target the cryptocurrency industry

The APT-C-26 (Lazarus) group has been observed using Electron-packaged malicious programs disguised as cryptocurrency trading tools to target individuals in the cryptocurrency industry. The attack involves a multi-stage process, including the use of poisoned open-source projects, obfuscated malicio…
cryptocurrency
data theft
electron
2025-01-22
uniswapsniperbot
Published: January 22, 2025
Downloadable IOCs: 0

Two ransomware campaigns tracked using 'email bombing' and Microsoft Teams 'vishing'

Sophos MDR has identified two threat clusters, STAC5143 and STAC5777, targeting organizations using Microsoft Office 365. Both employ similar tactics: email bombing to create urgency, followed by social engineering via Microsoft Teams calls posing as tech support. The attackers use remote access to…
social engineering
ransomware
black basta
vishing
email bombing
2025-01-22
Published: January 22, 2025
Downloadable IOCs: 17
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-23953

10.0
    Innovative Solutions user files
Published: January 22, 2025

CVE-2025-23918

9.9
    Smallerik File Browser
Published: January 22, 2025

CVE-2025-20156

9.9
    Cisco Meeting Management
Published: January 22, 2025

CVE-2024-13091

9.8
    Wpbot
  • Wpot
Published: January 22, 2025

CVE-2024-12857

9.8
    Scriptsbundle
  • Adforest
Published: January 22, 2025

CVE-2025-23932

9.8
    Quick Count
Published: January 22, 2025

CVE-2023-37777

9.8
    Synnefo Internet Management Software
Published: January 22, 2025

CVE-2025-23914

9.8
    Muzaara Google Ads Report
Published: January 22, 2025

CVE-2025-23931

9.3
    WordPress Local SEO
Published: January 22, 2025

CVE-2025-23942

9.1
    WP Load Gallery
Published: January 22, 2025

CVE-2025-23921

9.0
    Multi Uploader for Gravity Forms
Published: January 22, 2025

CVE-2023-36998

8.9
    NextEPC MME
Published: January 22, 2025

CVE-2025-23087

8.8
    Node.js
Published: January 22, 2025

CVE-2025-23088

8.8
    Node.js
Published: January 22, 2025

CVE-2025-23089

8.8
    Node.js
Published: January 22, 2025

CVE-2025-23944

8.8
    WOOEXIM.COM
Published: January 22, 2025

CVE-2024-31903

8.8
    IBM Sterling B2B Integrator Standard Edition
Published: January 22, 2025

CVE-2025-24398

8.8
    Jenkins Bitbucket Server Integration Plugin
Published: January 22, 2025

CVE-2024-11218

8.6
    podman
    buildah
Published: January 22, 2025

CVE-2023-37015

8.6
    Open5GS MME
Published: January 22, 2025

CVE-2023-37016

8.6
    Open5GS MME
Published: January 22, 2025

CVE-2023-37017

8.6
    Open5GS MME
Published: January 22, 2025

CVE-2023-37018

8.6
    Open5GS MME
Published: January 22, 2025

CVE-2023-37019

8.6
    Open5GS MME
Published: January 22, 2025

CVE-2023-37020

8.6
    Open5GS MME
Published: January 22, 2025

CVE-2023-37021

8.6
    Open5GS MME
Published: January 22, 2025

CVE-2023-37023

8.6
    Open5GS MME
Published: January 22, 2025

CVE-2024-34235

8.6
    Open5GS MME
Published: January 22, 2025

CVE-2024-24429

8.6
    Open5GS
Published: January 22, 2025

CVE-2025-23910

8.5
    Menus Plus+
Published: January 22, 2025

CVE-2025-0611

8.2
    Google Chrome
Published: January 22, 2025

CVE-2025-23948

8.1
    WebArea Background animation blocks
Published: January 22, 2025

CVE-2025-23949

8.1
    Mihajlovic Nenad Improved Sale Badges - Free Version
Published: January 22, 2025

CVE-2025-23083

7.7
    Node.js
Published: January 22, 2025

CVE-2025-23090

7.7
    Node.js
Published: January 22, 2025

CVE-2025-23784

7.6
    Contact Form 7 Round Robin Lead Distribution
Published: January 22, 2025

CVE-2025-22450

7.5
    UD-LT2 firmware
Published: January 22, 2025

CVE-2024-13496

7.5
    Gamipress
  • Gamipress
Published: January 22, 2025

CVE-2025-0395

7.5
    GNU C Library
Published: January 22, 2025

CVE-2024-24430

7.5
    Open5GS
Published: January 22, 2025

CVE-2025-23512

7.5
    Team118GROUP Agent
Published: January 22, 2025

CVE-2025-23774

7.5
    WPDB to Sql
Published: January 22, 2025

CVE-2025-23781

7.5
    WM Options Import Export
Published: January 22, 2025

CVE-2025-23938

7.5
    Image Gallery Box by CRUDLab
Published: January 22, 2025

CVE-2025-0638

7.5
    Routinator
Published: January 22, 2025

CVE-2025-20165

7.5
    Cisco BroadWorks
Published: January 22, 2025

CVE-2025-0612

7.5
    Google Chrome
Published: January 22, 2025

CVE-2024-13495

7.3
    Gamipress
  • Gamipress
Published: January 22, 2025

CVE-2024-13499

7.3
    Gamipress
  • Gamipress
Published: January 22, 2025

CVE-2023-37013

7.3
    Open5GS MME
Published: January 22, 2025

CVE-2024-56924

7.3
    Code Astro Internet banking system
Published: January 22, 2025

CVE-2025-20617

7.2
    UD-LT2 firmware
Published: January 22, 2025

CVE-2025-0428

7.2
    Aipower
  • Aipower
Published: January 22, 2025

CVE-2025-0429

7.2
    Aipower
  • Aipower
Published: January 22, 2025

CVE-2025-22772

7.1
    Mapbox for WP Advanced
Published: January 22, 2025

CVE-2025-23449

7.1
    Simple shortcode buttons
Published: January 22, 2025

CVE-2025-23462

7.1
    FWD Slider
Published: January 22, 2025

CVE-2025-23475

7.1
    History timeline
Published: January 22, 2025

CVE-2025-23495

7.1
    WooCommerce Order Search
Published: January 22, 2025

CVE-2025-23498

7.1
    Translation.Pro
Published: January 22, 2025

CVE-2025-23500

7.1
    Simple Custom post type custom field
Published: January 22, 2025

CVE-2025-23503

7.1
    Customizable Captcha and Contact Us
Published: January 22, 2025

CVE-2025-23506

7.1
    WP IMAP Auth
Published: January 22, 2025

CVE-2025-23507

7.1
    Blrt WP Embed
Published: January 22, 2025

CVE-2025-23509

7.1
    HyperComments
Published: January 22, 2025

CVE-2025-23535

7.1
    REAL WordPress Sidebar
Published: January 22, 2025

CVE-2025-23548

7.1
    Bilal TAS Responsivity
Published: January 22, 2025

CVE-2025-23578

7.1
    Custom CSS Addons
Published: January 22, 2025

CVE-2025-23583

7.1
    Explara Membership
Published: January 22, 2025

CVE-2025-23589

7.1
    ContentOptin Lite
Published: January 22, 2025

CVE-2025-23592

7.1
    dForms
Published: January 22, 2025

CVE-2025-23597

7.1
    Rio Photo Gallery
Published: January 22, 2025

CVE-2025-23601

7.1
    Tab My Content
Published: January 22, 2025

CVE-2025-23602

7.1
    EELV Newsletter
Published: January 22, 2025

CVE-2025-23603

7.1
    Group category creator
Published: January 22, 2025

CVE-2025-23604

7.1
    Rezdy Reloaded
Published: January 22, 2025

CVE-2025-23605

7.1
    Call To Action Popup
Published: January 22, 2025

CVE-2025-23606

7.1
    Calendi
Published: January 22, 2025

CVE-2025-23607

7.1
    CAMOO SMS
Published: January 22, 2025

CVE-2025-23609

7.1
    Tagesteller
Published: January 22, 2025

CVE-2025-23610

7.1
    Ultimate Events
Published: January 22, 2025

CVE-2025-23611

7.1
    NotFound WH Cache & Security
Published: January 22, 2025

CVE-2025-23625

7.1
    UNKNOWN
Published: January 22, 2025

CVE-2025-23630

7.1
    Cyber Slider
Published: January 22, 2025

CVE-2025-23631

7.1
    Content Planner
Published: January 22, 2025

CVE-2025-23643

7.1
    ReadMe Creator
Published: January 22, 2025

CVE-2025-23672

7.1
    Instant Appointment
Published: January 22, 2025

CVE-2025-23674

7.1
    Bit.ly linker
Published: January 22, 2025

CVE-2025-23676

7.1
    LH Email
Published: January 22, 2025

CVE-2025-23678

7.1
    LocalGrid
Published: January 22, 2025

CVE-2025-23679

7.1
    FP RSS Category Excluder
Published: January 22, 2025

CVE-2025-23681

7.1
    REDIRECTION PLUS
Published: January 22, 2025

CVE-2025-23682

7.1
    Preloader Quotes
Published: January 22, 2025

CVE-2025-23683

7.1
    MACME
Published: January 22, 2025

CVE-2025-23686

7.1
    Admin Menu Organizer
Published: January 22, 2025

CVE-2025-23695

7.1
    CtyGrid Hyp3rL0cal Search
Published: January 22, 2025

CVE-2025-23696

7.1
    Staging CDN
Published: January 22, 2025

CVE-2025-23697

7.1
    Podčlánková inzerce
Published: January 22, 2025

CVE-2025-23700

7.1
    YCyclista
Published: January 22, 2025

CVE-2025-23701

7.1
    Lime Developer Login
Published: January 22, 2025

CVE-2025-23706

7.1
    Jet Skinner for BuddyPress
Published: January 22, 2025

CVE-2025-23709

7.1
    Kiro G. Formatted post
Published: January 22, 2025

CVE-2025-23732

7.1
    Easy Filtering
Published: January 22, 2025

CVE-2025-23746

7.1
    CMC MIGRATE
Published: January 22, 2025

CVE-2025-23758

7.1
    Pootle button
Published: January 22, 2025

CVE-2025-23768

7.1
    InFunding
Published: January 22, 2025

CVE-2025-23769

7.1
    Content Mirror
Published: January 22, 2025

CVE-2025-23770

7.1
    Fast Tube
Published: January 22, 2025

CVE-2025-23798

7.1
    BuddyPress
Published: January 22, 2025

CVE-2025-23803

7.1
    PQINA Snippy
Published: January 22, 2025

CVE-2025-23806

7.1
    Unknown
Published: January 22, 2025

CVE-2025-23811

7.1
    WP2APP
Published: January 22, 2025

CVE-2025-23812

7.1
    Contact Form 7 Round Robin Lead Distribution
Published: January 22, 2025

CVE-2025-23846

7.1
    Flexible Blogtitle
Published: January 22, 2025

CVE-2025-23866

7.1
    EU DSGVO Helper
Published: January 22, 2025

CVE-2025-23867

7.1
    WordPress File Search
Published: January 22, 2025

CVE-2025-23874

7.1
    WP Block Pack
Published: January 22, 2025

CVE-2025-23882

7.1
    WP Download Codes
Published: January 22, 2025

CVE-2025-23959

7.1
    Good Old Gallery
Published: January 22, 2025

CVE-2025-23966

7.1
    WooCommerce - Gateway for Pasargad Bank
Published: January 22, 2025

CVE-2025-23809

7.1
    Blue Wrench Video Widget
Published: January 22, 2025

CVE-2025-24401

6.8
    Jenkins Folder-based Authorization Strategy Plugin
Published: January 22, 2025

CVE-2025-22980

6.7
    Senayan Library Management System SLiMS
Published: January 22, 2025

CVE-2025-23237

6.6
    UD-LT2 firmware
Published: January 22, 2025

CVE-2025-23486

6.5
    Database Sync
Published: January 22, 2025

CVE-2024-55488

6.5
    Umbraco CMS
Published: January 22, 2025

CVE-2025-23047

6.5
    Cilium
Published: January 22, 2025

CVE-2024-13584

6.4
    Videowhisper
  • Picture Gallery
Published: January 22, 2025

CVE-2024-13590

6.4
    Ayecode
  • Ketchup Shortcodes
Published: January 22, 2025

CVE-2024-12117

6.4
    Gambit
  • Stackable
Published: January 22, 2025

CVE-2024-42013

6.4
    Blocky-Gui
Published: January 22, 2025

CVE-2024-12477

6.4
    Avada Builder plugin for WordPress
Published: January 22, 2025

CVE-2024-13361

6.3
    Aipower
  • Aipower
Published: January 22, 2025

CVE-2023-37009

6.3
    Open5GS MME
Published: January 22, 2025

CVE-2023-37010

6.3
    Open5GS MME
Published: January 22, 2025

CVE-2023-37011

6.3
    Open5GS MME
Published: January 22, 2025

CVE-2025-24027

6.2
    PrestaShop
Published: January 22, 2025

CVE-2024-13406

6.1
    Icopydoc
  • Xml For Google Merchant Center
Published: January 22, 2025

CVE-2024-13319

6.1
    Themify
  • Themify Builder
Published: January 22, 2025

CVE-2025-23992

5.9
    Toocheke Companion
Published: January 22, 2025

CVE-2025-23562

5.8
    XLSXviewer
Published: January 22, 2025

CVE-2024-42012

5.7
    GRAU DATA Blocky
Published: January 22, 2025

CVE-2024-56914

5.7
    D-Link DSL-3782
Published: January 22, 2025

CVE-2024-13426

5.4
    Wp-Polls Project
  • Wp-Polls
Published: January 22, 2025

CVE-2024-13360

5.4
    Aipower
  • Aipower
Published: January 22, 2025

CVE-2025-0604

5.4
    Keycloak
Published: January 22, 2025

CVE-2024-56923

5.4
    Silverpeas Core
Published: January 22, 2025

CVE-2023-37002

5.3
    Open5GS MME
Published: January 22, 2025

CVE-2023-37003

5.3
    Open5GS MME
Published: January 22, 2025

CVE-2023-37004

5.3
    Open5GS MME
Published: January 22, 2025

CVE-2023-37005

5.3
    Open5GS MME
Published: January 22, 2025

CVE-2023-37006

5.3
    Open5GS MME
Published: January 22, 2025

CVE-2023-37007

5.3
    Open5GS MME
Published: January 22, 2025

CVE-2023-37008

5.3
    Open5GS MME
Published: January 22, 2025

CVE-2023-37012

5.3
    Open5GS MME
Published: January 22, 2025

CVE-2024-24432

5.3
    Open5GS
Published: January 22, 2025

CVE-2025-20128

5.3
    ClamAV
Published: January 22, 2025

CVE-2025-23028

5.3
    Cilium
Published: January 22, 2025

CVE-2024-10929

5.1
    Arm Cortex-A72 processor
    Arm Cortex-A73 processor
    Arm Cortex-A75 processor
Published: January 22, 2025

CVE-2022-23439

4.7
    Fortinet
  • Fortiadc
  • Fortiauthenticator
  • Fortiddos
  • Fortiddos-F
  • Fortimail
  • Fortindr
  • Fortiproxy
  • Fortirecorder
  • Fortisoar
  • Fortitester
  • Fortivoice
  • Fortiwlc
  • Fortios
  • Fortiswitch
Published: January 22, 2025

CVE-2024-51457

4.4
    IBM Robotic Process Automation for Cloud Pak
Published: January 22, 2025

CVE-2024-12879

4.3
    Quantumcloud
  • Wpot
Published: January 22, 2025

CVE-2024-13447

4.3
    Thimpress
  • Wp Hotel Booking
Published: January 22, 2025

CVE-2025-23684

4.3
    Debug Tool
Published: January 22, 2025

CVE-2025-24397

4.3
    Jenkins GitLab Plugin
Published: January 22, 2025

CVE-2025-24402

4.3
    Jenkins Azure Service Fabric Plugin
Published: January 22, 2025

CVE-2025-24403

4.3
    Jenkins Azure Service Fabric Plugin
Published: January 22, 2025

CVE-2025-0625

3.1
    CampCodes School Management Software
Published: January 22, 2025

CVE-2023-37039

None
    Magma
Published: January 22, 2025

CVE-2023-37014

None
    Open5GS MME
Published: January 22, 2025

CVE-2023-37022

None
    Open5GS MME
Published: January 22, 2025

CVE-2025-24399

None
    Jenkins OpenID Connect Authentication Plugin
Published: January 22, 2025

CVE-2025-24400

None
    Jenkins Eiffel Broadcaster Plugin
Published: January 22, 2025

CVE-2024-55957

None
    Thermo Fisher Scientific Xcalibur
    Thermo Foundation Instrument Control Software (ICSW)
Published: January 22, 2025

CVE-2025-0651

None
    Cloudflare WARP
Published: January 22, 2025

CVE-2024-11166

None
    TCAS II system
Published: January 22, 2025

CVE-2024-9310

None
    UNKNOWN
Published: January 22, 2025
Click here to see more Vulnerabilities