Tag: 2025-01-29

8 Attack Reports | 72 Vulnerabilities

Attack reports

Threat Actors Exploit Government Website Vulnerabilities for Phishing Campaigns

Threat actors are exploiting vulnerabilities in government websites, particularly .gov domains, to conduct phishing campaigns. The abuse primarily involves using open redirects to bypass secure email gateways and lead victims to credential phishing pages. A significant portion of these exploits may…
phishing
credential theft
email security
2025-01-29
stormkitty
agent tesla keylogger
CVE-2024-25608
open redirects
.gov domains
liferay
government websites
Published: January 29, 2025
Downloadable IOCs: 4

Cyber Espionage Operation Expanding from Central Asia

An active cyber-espionage campaign by UAC-0063 is targeting organizations in Central Asia and Europe, including government entities and diplomatic missions. The group exploits previously compromised victims by weaponizing exfiltrated documents to deliver HATVIBE malware. They use sophisticated tool…
government targets
cyber-espionage
central asia
hatvibe
2025-01-29
downexpyer
weaponized documents
pyplunderplug
logpie
Published: January 29, 2025
Downloadable IOCs: 0

Phorpiex - Downloader Delivering Ransomware

The report analyzes the Phorpiex botnet's role in delivering LockBit Black Ransomware. It highlights the automated execution of ransomware through Phorpiex, minimal changes to the botnet's code since its source code sale in 2021, and direct deployment of LockBit without network expansion. The analy…
phishing
ransomware
lockbit
botnet
phorpiex
downloader
gandcrab
2025-01-29
twizt
Published: January 29, 2025
Downloadable IOCs: 14

New Aquabot Variant Targeting Mitel SIP Phones

A new variant of the Mirai-based malware, Aquabot, dubbed Aquabotv3, is actively exploiting Mitel SIP phones through CVE-2024-41710. This variant introduces a novel feature for Mirai-based botnets: reporting back to the command and control server when kill signals are caught on infected devices. Th…
ddos
iot
botnet
mirai
CVE-2018-10562
CVE-2018-10561
CVE-2024-41710
2025-01-29
aquabotv3
CVE-2022-31137
aquabot
CVE-2018-17532
CVE-2023-26801
Published: January 29, 2025
Downloadable IOCs: 45

WINDOWS LOCKER RANSOMWARE

A new ransomware strain called 'Windows Locker' has been identified, targeting victims by encrypting files and appending the .winlocker extension. Upon infection, it drops a ransom note named Readme.txt with instructions for contacting the attacker. Written in .NET, this sophisticated malware modif…
ransomware
2025-01-29
windows locker
Published: January 29, 2025
Downloadable IOCs: 3

Windows Locker Ransomware Analysis

A new ransomware strain called 'Windows Locker' has been identified, targeting victims by encrypting files and appending the .winlocker extension. Upon infection, it drops a ransom note named Readme.txt with instructions for contacting the attacker. Written in .NET, this sophisticated malware modif…
ransomware
2025-01-29
windows locker
Published: January 29, 2025
Downloadable IOCs: 0

Unmasking the Shadow of PoisonPlug's Obfuscator

Since 2022, cyber espionage operations utilizing POISONPLUG.SHADOW have been tracked, employing a custom obfuscating compiler called ScatterBrain. This evolved version of ScatterBee targets entities in Europe and Asia Pacific. POISONPLUG.SHADOW, a variant of the POISONPLUG modular backdoor, uses ad…
cyber espionage
poisonplug.shadow
2025-01-29
poisonplug
poisonplug.deed
scatterbee
scatterbrain
Published: January 29, 2025
Downloadable IOCs: 2

Phishing Campaign Baits Hook With Malicious Amazon PDFs

A new phishing tactic has emerged, using PDF documents to trick victims by announcing expired Amazon Prime memberships. The campaign targets users via email, containing PDF attachments that lead to fake Amazon pages requesting personal and credit card information. Researchers from Palo Alto Network…
phishing
credit card fraud
2025-01-29
Published: January 29, 2025
Downloadable IOCs: 4
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-21415

9.9
    Microsoft
  • Azure Ai Face Service
Published: January 29, 2025

CVE-2025-20014

9.8
    mySCADA myPRO
Published: January 29, 2025

CVE-2025-20061

9.8
    mySCADA myPRO
Published: January 29, 2025

CVE-2024-48761

9.8
    Celk Saude
  • Version(s): 3.1.252.1
Published: January 29, 2025

CVE-2024-54852

9.8
    Teedy
  • Version(s): 1.9, 1.10, 1.11, 1.12
Published: January 29, 2025

CVE-2024-57395

9.8
    Safety production process management system
  • Version(s): 1.0
Published: January 29, 2025

CVE-2025-0851

9.8
    Deep Java Library (DJL)
Published: January 29, 2025

CVE-2024-57665

9.8
    JFinalCMS
  • Version(s): 1.0
Published: January 29, 2025

CVE-2024-48849

9.4
    FLXEON
  • Version(s): through <= 9.3.4
Published: January 29, 2025

CVE-2024-48852

9.4
    FLEXON
  • Version(s): <= 9.3.4
Published: January 29, 2025

CVE-2025-0762

8.8
    Google Chrome
  • Version(s): before 132.0.6834.159
Published: January 29, 2025

CVE-2024-54851

8.8
    Teedy
  • Version(s): <= 1.12
Published: January 29, 2025

CVE-2025-21396

8.2
    Microsoft
  • Account
Published: January 29, 2025

CVE-2025-0798

8.1
    MicroWorld eScan Antivirus
  • Version(s): 7.0.32
Published: January 29, 2025

CVE-2024-41140

8.1
    Zohocorp ManageEngine Applications Manager
  • Version(s): 174000 and prior
Published: January 29, 2025

CVE-2025-24527

8.0
    Akamai Enterprise Application Access
  • Version(s): before 2025-01-17
Published: January 29, 2025

CVE-2025-24789

7.8
    Snowflake JDBC Driver
  • Version(s): 3.2.3 - 3.21.0
Published: January 29, 2025

CVE-2024-57509

7.8
    Bento4 mp42avc
  • Version(s): v.3bdc891602d19789b8e8626e4a3e613a937b4d35
Published: January 29, 2025

CVE-2024-57510

7.8
    Bento4 mp42avc
  • Version(s): v.3bdc891602d19789b8e8626e4a3e613a937b4d35
Published: January 29, 2025

CVE-2024-7695

7.5
    UNKNOWN
Published: January 29, 2025

CVE-2021-3978

7.5
    octorpki
Published: January 29, 2025

CVE-2024-11187

7.5
    BIND
  • Version(s): 9.11.0 - 9.11.37, 9.16.0 - 9.16.50, 9.18.0 - 9.18.32, 9.20.0 - 9.20.4, 9.21.0 - 9.21.3, 9.11.3-S1 - 9.11.37-S1, 9.16.8-S1 - 9.16.50-S1, 9.18.11-S1 - 9.18.32-S1
Published: January 29, 2025

CVE-2024-12705

7.5
    BIND
  • Version(s): 9.18.0 - 9.18.32, 9.20.0 - 9.20.4, 9.21.0 - 9.21.3, 9.18.11-S1 - 9.18.32-S1
Published: January 29, 2025

CVE-2024-23733

7.5
    Software AG webMethods Integration Server
  • Version(s): 10.15.0 before Core_Fix7
Published: January 29, 2025

CVE-2025-0802

7.3
    Mayurik
  • Best Employee Management System
Published: January 29, 2025

CVE-2025-0803

7.3
    Gymmanagementsystem
  • Gym Management System
Published: January 29, 2025

CVE-2025-0841

7.3
    Aridius XYZ on OpenCart
  • Version(s): up to 20240927
Published: January 29, 2025

CVE-2025-0842

7.3
    Needyamin
  • Library Card System
Published: January 29, 2025

CVE-2025-0843

7.3
    Needyamin
  • Library Card System
Published: January 29, 2025

CVE-2024-13696

7.2
    Flexible Wishlist for WooCommerce plugin
  • Version(s): up to 1.2.25
Published: January 29, 2025

CVE-2024-57436

7.2
    RuoYi
  • Version(s): 4.8.0
Published: January 29, 2025

CVE-2024-12749

7.1
    Competition Form WordPress plugin
  • Version(s): 2.0
Published: January 29, 2025

CVE-2025-24793

7.0
    Snowflake Connector for Python
  • Version(s): 2.2.5 - 3.13.0
Published: January 29, 2025

CVE-2025-24794

6.7
    Snowflake Connector for Python
  • Version(s): 2.7.12 - 3.13.0
Published: January 29, 2025

CVE-2024-57437

6.5
    RuoYi
  • Version(s): 4.8.0
Published: January 29, 2025

CVE-2024-57513

6.5
    Bento4
Published: January 29, 2025

CVE-2025-0804

6.4
    ClickWhale - Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress
  • Version(s): up to 2.4.1
Published: January 29, 2025

CVE-2024-13561

6.4
    Target Video Easy Publish plugin for WordPress
  • Version(s): up to 3.8.3
Published: January 29, 2025

CVE-2025-0353

6.4
    Divi Torque Lite – Best Divi Addon, Extensions, Modules & Social Modules plugin for WordPress
  • Version(s): up to 4.1.0
Published: January 29, 2025

CVE-2025-0791

6.3
    ESAFENET CDG
  • Version(s): V5
Published: January 29, 2025

CVE-2025-0792

6.3
    ESAFENET CDG
  • Version(s): V5
Published: January 29, 2025

CVE-2025-0793

6.3
    ESAFENET CDG
  • Version(s): V5
Published: January 29, 2025

CVE-2025-23362

6.1
    EXIF Viewer Classic
  • Version(s): 2.3.2, 2.4.0
Published: January 29, 2025

CVE-2024-51182

6.1
    Celk Saude
  • Version(s): 3.1.252.1
Published: January 29, 2025

CVE-2023-35017

5.9
    IBM Security Verify Governance Identity Manager
  • Version(s): 10.0.2
Published: January 29, 2025

CVE-2025-0617

5.9
    HX console
  • Version(s): 10.0.0, previous versions
Published: January 29, 2025

CVE-2023-35907

5.9
    IBM Aspera Faspex
  • Version(s): 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.6, 5.0.7, 5.0.8, 5.0.9, 5.0.10
Published: January 29, 2025

CVE-2023-37398

5.9
    IBM Aspera Faspex
  • Version(s): 5.0.0, 5.0.10
Published: January 29, 2025

CVE-2024-57438

5.4
    RuoYi
  • Version(s): 4.8.0
Published: January 29, 2025

CVE-2023-37413

5.3
    IBM Aspera Faspex
  • Version(s): 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.6, 5.0.7, 5.0.8, 5.0.9, 5.0.10
Published: January 29, 2025

CVE-2025-24882

5.2
    regclient
  • Version(s): 0.7.1
Published: January 29, 2025

CVE-2025-0840

5.0
    GNU Binutils
  • Version(s): up to 2.43
Published: January 29, 2025

CVE-2025-24788

5.0
    snowflake-connector-net
  • Version(s): 2.0.12 - 4.2.0
Published: January 29, 2025

CVE-2024-57439

4.9
    ruoyi
  • Version(s): 4.8.0
Published: January 29, 2025

CVE-2023-33838

4.4
    IBM Security Verify Governance Identity Manager
  • Version(s): 10.0.2
Published: January 29, 2025

CVE-2025-24792

4.4
    Snowflake PHP PDO Driver
  • Version(s): 0.2.0, 3.0.3
Published: January 29, 2025

CVE-2023-37412

4.4
    IBM Aspera Faspex
  • Version(s): 5.0.0 - 5.0.10
Published: January 29, 2025

CVE-2025-24791

4.4
    snowflake-connector-nodejs
  • Version(s): 1.12.0 - 2.0.1
Published: January 29, 2025

CVE-2025-24790

4.4
    Snowflake JDBC Driver
  • Version(s): 3.6.8, 3.7.0, 3.8.0, 3.9.0, 3.10.0, 3.11.0, 3.12.0, 3.13.0, 3.14.0, 3.15.0, 3.16.0, 3.17.0, 3.18.0, 3.19.0, 3.20.0, 3.21.0
Published: January 29, 2025

CVE-2025-24795

4.4
    Snowflake Connector for Python
  • Version(s): 2.3.7 - 3.13.0
Published: January 29, 2025

CVE-2025-0806

4.3
    Anisha
  • Job Recruitment
Published: January 29, 2025

CVE-2025-24374

4.3
    Twig
  • Version(s): 3.19.0
Published: January 29, 2025

CVE-2025-0790

3.5
    ESAFENET CDG
  • Version(s): 5
Published: January 29, 2025

CVE-2025-0794

3.5
    ESAFENET CDG
Published: January 29, 2025

CVE-2025-0795

3.5
    ESAFENET CDG
  • Version(s): V5
Published: January 29, 2025

CVE-2025-0797

3.3
    MicroWorld eScan Antivirus
  • Version(s): 7.0.32
Published: January 29, 2025

CVE-2025-0800

2.4
    Argie
  • Online Courseware
Published: January 29, 2025

CVE-2024-57965

0.0
    axios
  • Version(s): before 1.7.8
Published: January 29, 2025

CVE-2024-54461

None
    file_selector_android
  • Version(s): 0.5.1+12
Published: January 29, 2025

CVE-2024-54462

None
    image_picker_android
  • Version(s): 0.8.12+18
Published: January 29, 2025

CVE-2024-10001

None
    GitHub Enterprise Server
  • Version(s): before 3.11.16, 3.12.10, 3.13.5, 3.14.2, 3.15.0
Published: January 29, 2025

CVE-2025-24884

None
    kube-audit-rest
  • Version(s): 1.0.16
Published: January 29, 2025
Click here to see more Vulnerabilities