Tag: 2025-01-31

11 Attack Reports | 164 Vulnerabilities

Attack reports

Analysis of Astral Stealer

Astral Stealer v1.8 is a powerful malware tool coded in Python, C#, and JavaScript, designed for data theft and crypto wallet exploitation. It targets gaming accounts, browser credentials, and cryptocurrency wallets while employing anti-debugging and VM bypass techniques. The stealer offers advance…
cryptocurrency
stealer
data exfiltration
information theft
2025-01-31
browser injection
discord injection
astral stealer
Published: January 31, 2025
Downloadable IOCs: 3

Infrastructure Laundering: Cloudy Behavior Around FUNNULL CDN Renting IPs from Big Tech

This article unveils the practice of 'infrastructure laundering' by cybercriminals, specifically focusing on the FUNNULL content delivery network. The investigation reveals that FUNNULL has been renting IP addresses from major cloud providers like Amazon Web Services and Microsoft Azure, using thes…
phishing
2025-01-31
infrastructure laundering
Published: January 31, 2025
Downloadable IOCs: 9

Exposed SMB: The Hidden Risk Behind 'WantToCry' Ransomware Attacks

The WantToCry ransomware group, active since December 2023, has intensified its operations in 2024 by exploiting misconfigured Server Message Block (SMB) services. The group targets multiple network services, including SMB, SSH, FTP, RPC, and VNC, using brute-force attacks with a database of over o…
ransomware
smb
2025-01-31
wanttocry
Published: January 31, 2025
Downloadable IOCs: 2

Threat Actors Use CVE-2019-18935 to Deliver Reverse Shells and JuicyPotatoNG

In early January 2025, a threat actor was observed exploiting CVE-2019-18935 in Progress Telerik UI for ASP.NET AJAX. The attacker used the IIS worker process to load a reverse shell and execute reconnaissance commands. The infection process involved confirming the availability of the file upload h…
privilege escalation
iis
2025-01-31
juicypotatong
CVE-2019-18935
Published: January 31, 2025
Linked vulnerabilities : CVE-2019-18935
Downloadable IOCs: 4

TAG-124’s Multi-Layered TDS Infrastructure and Extensive User Base

Insikt Group has identified a complex infrastructure linked to the traffic distribution system TAG-124, which overlaps with several threat activity clusters and includes compromised WordPress sites and various servers. Multiple threat actors, including operators of Rhysida and Interlock ransomware,…
remcos
cleanuploader
mintsloader
2025-01-31
tag-124
ta582
Published: January 31, 2025
Downloadable IOCs: 102

NGC4020 Attacks: DameWare Mini Remote Control Vulnerability

The Solar 4RAYS team investigated a cyberattack on an industrial company, uncovering that attackers exploited a vulnerability in DameWare Mini Remote Control to deliver malware and disable security protections. The NGC4020 group initially compromised systems in December 2022 using CVE-2019-3980. Th…
vulnerability
quasarrat
reverse shell
antivirus bypass
2025-01-31
dameware
Published: January 31, 2025
Downloadable IOCs: 0

Coyote Banking Trojan: A Stealthy Attack via LNK Files

A sophisticated multi-stage attack utilizing LNK files to deliver the Coyote Banking Trojan has been identified, primarily targeting Brazilian financial applications. The malware employs PowerShell commands, shellcode injection, and registry manipulation to establish persistence and evade detection…
phishing
lnk files
2025-01-31
coyote banking trojan
Published: January 31, 2025
Downloadable IOCs: 0

Unmasking SparkRAT: Detection & macOS Campaign Insights

SparkRAT, a versatile malware tool, continues to pose a significant threat due to its modular design and cross-platform support. Recent investigations have uncovered new infrastructure associated with a suspected DPRK campaign targeting macOS users. The analysis reveals techniques for detecting Spa…
xworm
macos
2025-01-31
Published: January 31, 2025
Downloadable IOCs: 0

Lumma Stealer's GitHub-Based Delivery Explored via Managed Detection and Response

Trend Micro's Managed XDR team investigated a sophisticated campaign distributing Lumma Stealer through GitHub. The attackers exploited GitHub's release infrastructure to deliver various malware, including SectopRAT, Vidar, and Cobeacon. The campaign used compromised websites for redirection to Git…
lumma stealer
information stealing
2025-01-31
Published: January 31, 2025
Downloadable IOCs: 0

NOVA - A Well-Forgotten Stealer

This intelligence report discusses a recent cyber threat targeting Russian companies. The attackers are employing a fork of a popular stealer malware, known as NOVA, to steal data from these organizations. The report highlights the resurgence of an older malware strain that has been modified and re…
data theft
stealer
2025-01-31
nova
Published: January 31, 2025
Downloadable IOCs: 0

Microsoft advertisers phished via malicious Google ads

Malicious actors are targeting Microsoft advertisers through fraudulent Google ads, aiming to steal login credentials for Microsoft's advertising platform. The campaign involves sophisticated techniques like cloaking, Cloudflare challenges, and redirection chains to evade detection. Phishing pages …
phishing
credential theft
google ads
2025-01-31
Published: January 31, 2025
Downloadable IOCs: 101
Click here to see more Attack Reports

Vulnerabilities

CVE-2022-1736

9.8
    Ubuntu
Published: January 31, 2025

CVE-2025-0493

9.8
    MultiVendorX - Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress
Published: January 31, 2025

CVE-2025-0929

9.8
    TeamCal Neo
Published: January 31, 2025

CVE-2024-53320

9.8
    Qualisys C++ SDK
Published: January 31, 2025

CVE-2024-53356

9.8
    EasyVirt DCScope
    CO2Scope
Published: January 31, 2025

CVE-2024-55062

9.8
    EasyVirt DCScope
    co2Scope
Published: January 31, 2025

CVE-2025-24891

9.6
    Dumb Drop
Published: January 31, 2025

CVE-2024-23968

8.8
    ChargePoint Home Flex charging stations
Published: January 31, 2025

CVE-2024-23969

8.8
    ChargePoint Home Flex charging stations
Published: January 31, 2025

CVE-2024-23971

8.8
    ChargePoint Home Flex charging stations
Published: January 31, 2025

CVE-2024-23973

8.8
    Silicon Labs Gecko OS
Published: January 31, 2025

CVE-2024-52875

8.8
    GFI Kerio Control
Published: January 31, 2025

CVE-2024-53355

8.8
    EasyVirt DCScope
    CO2Scope
Published: January 31, 2025

CVE-2024-57434

8.8
    macrozheng mall-tiny
Published: January 31, 2025

CVE-2024-13767

8.1
    WordPress Live2DWebCanvas plugin
Published: January 31, 2025

CVE-2025-21671

7.8
    Linux
  • Linux Kernel
Published: January 31, 2025

CVE-2025-21680

7.8
    Linux
  • Linux Kernel
Published: January 31, 2025

CVE-2024-24731

7.5
    Silicon Labs Gecko OS
Published: January 31, 2025

CVE-2022-28653

7.5
    Ubuntu
Published: January 31, 2025

CVE-2024-45650

7.5
    IBM Security Verify Directory
Published: January 31, 2025

CVE-2024-53319

7.5
    Qualisys C++ SDK
Published: January 31, 2025

CVE-2024-53357

7.5
    EasyVirt DCScope
    CO2Scope
Published: January 31, 2025

CVE-2024-57587

7.5
    EasyVirt DCScope
    co2Scope
Published: January 31, 2025

CVE-2024-13472

7.3
    Wcproducttable
  • Woocommerce Product Table
Published: January 31, 2025

CVE-2024-13504

7.2
    Shared Files – Frontend File Upload Form & Secure File Sharing plugin for WordPress
Published: January 31, 2025

CVE-2025-0809

7.2
    WordPress Link Fixer plugin
Published: January 31, 2025

CVE-2025-22332

7.1
    CloudFlare Cache Purge
Published: January 31, 2025

CVE-2025-22341

7.1
    Hide Login+
Published: January 31, 2025

CVE-2025-22564

7.1
    Faaiq Pretty Url
Published: January 31, 2025

CVE-2025-23596

7.1
    Notifikácie.sk
Published: January 31, 2025

CVE-2025-23671

7.1
    WP OpenSearch
Published: January 31, 2025

CVE-2025-23759

7.1
    Affiliate Tools Việt Nam
Published: January 31, 2025

CVE-2025-23976

7.1
    Issuu Panel
Published: January 31, 2025

CVE-2025-23977

7.1
    Bhaskar Dhote Post Carousel Slider
Published: January 31, 2025

CVE-2025-23978

7.1
    FlashCounter
Published: January 31, 2025

CVE-2025-23980

7.1
    Full Circle
Published: January 31, 2025

CVE-2025-23989

7.1
    Alessandro Piconi - SabLab Internal Link Builder
Published: January 31, 2025

CVE-2025-23990

7.1
    Scroll Styler
Published: January 31, 2025

CVE-2025-24534

7.1
    DPortfolio
Published: January 31, 2025

CVE-2025-24535

7.1
    SKT Themes SKT Donation
Published: January 31, 2025

CVE-2025-24549

7.1
    Post Meta
Published: January 31, 2025

CVE-2025-24551

7.1
    Radio Buttons and Swatches for WooCommerce
Published: January 31, 2025

CVE-2025-24560

7.1
    Awesome Event Booking
Published: January 31, 2025

CVE-2025-24563

7.1
    Cleanup - Directory Listing & Classifieds WordPress Plugin
Published: January 31, 2025

CVE-2025-24608

7.1
    GD Mail Queue
Published: January 31, 2025

CVE-2025-24609

7.1
    PortOne PORTONE 우커머스 결제
Published: January 31, 2025

CVE-2025-24632

7.1
    AlgolPlus Advanced Dynamic Pricing for WooCommerce
Published: January 31, 2025

CVE-2025-24635

7.1
    Paytm Payment Donation
Published: January 31, 2025

CVE-2025-24686

7.1
    Metagauss
  • Registrationmagic
Published: January 31, 2025

CVE-2025-24710

7.1
    Gwolle Guestbook
Published: January 31, 2025

CVE-2025-24718

7.1
    SWIT WP Sessions Time Monitoring Full Automatic
Published: January 31, 2025

CVE-2025-24749

7.1
    EZPZ SAML SP Single Sign On (SSO)
Published: January 31, 2025

CVE-2025-24831

6.6
    Acronis Cyber Protect Cloud Agent (Windows)
Published: January 31, 2025

CVE-2024-23930

6.5
    Pioneer DMH-WT7600NEX devices
Published: January 31, 2025

CVE-2024-23970

6.5
    ChargePoint Home Flex charging stations
Published: January 31, 2025

CVE-2025-22265

6.5
    mgplugin EMI Calculator
Published: January 31, 2025

CVE-2025-22757

6.5
    CodeBard Help Desk
Published: January 31, 2025

CVE-2025-23987

6.5
    CodegearThemes Designer
Published: January 31, 2025

CVE-2025-24597

6.5
    UkrSolution Barcode Generator for WooCommerce
Published: January 31, 2025

CVE-2024-12415

6.5
    WordPress AI Infographic Maker plugin
Published: January 31, 2025

CVE-2024-53354

6.5
    EasyVirt DCScope
    CO2Scope
Published: January 31, 2025

CVE-2024-57435

6.5
    macrozheng mall-tiny
Published: January 31, 2025

CVE-2024-1211

6.4
    GitLab CE/EE
Published: January 31, 2025

CVE-2024-13396

6.4
    Frictionless plugin for WordPress
Published: January 31, 2025

CVE-2024-13397

6.4
    WPRadio - WordPress Radio Streaming Plugin
Published: January 31, 2025

CVE-2024-13399

6.4
    Gosign – Posts Slider Block plugin for WordPress
Published: January 31, 2025

CVE-2024-13463

6.4
    SeatReg plugin for WordPress
Published: January 31, 2025

CVE-2025-0507

6.4
    WordPress Ticketmeo - Sell Tickets - Event Ticketing plugin
Published: January 31, 2025

CVE-2024-11886

6.4
    Contact Form and Calls To Action by vcita plugin for WordPress
Published: January 31, 2025

CVE-2024-53007

6.4
    Bentley Systems ProjectWise Integration Server
Published: January 31, 2025

CVE-2024-13157

6.4
    MP3 Audio Player - Music Player, Podcast Player & Radio by Sonaar plugin for WordPress
Published: January 31, 2025

CVE-2024-13566

6.4
    WP DataTable plugin for WordPress
Published: January 31, 2025

CVE-2024-12037

6.4
    Post Form - Registration Form - Profile Form for User Profiles - Frontend Content Forms for User Submissions (UGC) plugin for WordPress
Published: January 31, 2025

CVE-2024-13662

6.4
    eHive Objects Image Grid plugin for WordPress
Published: January 31, 2025

CVE-2024-49807

6.4
    IBM Sterling B2B Integrator Standard Edition
Published: January 31, 2025

CVE-2024-49339

6.4
    IBM Financial Transaction Manager for SWIFT Services for Multiplatforms
Published: January 31, 2025

CVE-2025-24827

6.3
    Acronis Cyber Protect Cloud Agent (Windows)
Published: January 31, 2025

CVE-2025-24828

6.3
    Acronis Cyber Protect Cloud Agent (Windows)
Published: January 31, 2025

CVE-2025-24829

6.3
    Acronis Cyber Protect Cloud Agent (Windows)
Published: January 31, 2025

CVE-2025-24830

6.3
    Acronis Cyber Protect Cloud Agent (Windows)
Published: January 31, 2025

CVE-2025-0934

6.3
    Anisha
  • Job Recruitment
Published: January 31, 2025

CVE-2025-0470

6.1
    Forminator Forms plugin for WordPress
Published: January 31, 2025

CVE-2024-12275

6.1
    Canvasflow for WordPress plugin
Published: January 31, 2025

CVE-2024-13100

6.1
    OPSI Israel Domestic Shipments WordPress plugin
Published: January 31, 2025

CVE-2024-13219

6.1
    Privacy Policy Genius WordPress plugin
Published: January 31, 2025

CVE-2025-0930

6.1
    TeamCal Neo
Published: January 31, 2025

CVE-2024-49349

6.1
    IBM Financial Transaction Manager for SWIFT Services for Multiplatforms
Published: January 31, 2025

CVE-2025-23001

6.1
    CTFd
Published: January 31, 2025

CVE-2024-13623

5.9
    Order Export for WooCommerce plugin
Published: January 31, 2025

CVE-2025-22720

5.8
    MagePeople Team Booking and Rental Manager
Published: January 31, 2025

CVE-2025-21665

5.5
    Linux
  • Linux Kernel
Published: January 31, 2025

CVE-2025-21666

5.5
    Linux
  • Linux Kernel
Published: January 31, 2025

CVE-2025-21667

5.5
    Linux
  • Linux Kernel
Published: January 31, 2025

CVE-2025-21669

5.5
    Linux
  • Linux Kernel
Published: January 31, 2025

CVE-2025-21670

5.5
    Linux
  • Linux Kernel
Published: January 31, 2025

CVE-2025-21672

5.5
    Linux
  • Linux Kernel
Published: January 31, 2025

CVE-2025-21673

5.5
    Linux
  • Linux Kernel
Published: January 31, 2025

CVE-2025-21674

5.5
    Linux
  • Linux Kernel
Published: January 31, 2025

CVE-2025-21675

5.5
    Linux
  • Linux Kernel
Published: January 31, 2025

CVE-2025-21676

5.5
    Linux
  • Linux Kernel
Published: January 31, 2025

CVE-2025-21681

5.5
    Linux
  • Linux Kernel
Published: January 31, 2025

CVE-2025-21682

5.5
    Linux
  • Linux Kernel
Published: January 31, 2025

CVE-2025-21683

5.5
    Linux
  • Linux Kernel
Published: January 31, 2025

CVE-2024-10867

5.4
    Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg plugin for WordPress
Published: January 31, 2025

CVE-2025-22216

5.4
    VMware Unified Access Gateway (UAG)
Published: January 31, 2025

CVE-2024-44055

5.4
    Oshine Modules
Published: January 31, 2025

CVE-2025-23985

5.4
    Brainvireinfo Dynamic URL SEO
Published: January 31, 2025

CVE-2024-47116

5.4
    IBM Sterling B2B Integrator Standard Edition
Published: January 31, 2025

CVE-2024-12267

5.3
    Drag and Drop Multiple File Upload – Contact Form 7 plugin for WordPress
Published: January 31, 2025

CVE-2023-0092

4.9
    Juju
Published: January 31, 2025

CVE-2024-12872

4.8
    Zalomení WordPress plugin
Published: January 31, 2025

CVE-2024-40696

4.8
    IBM Sterling B2B Integrator Standard Edition
Published: January 31, 2025

CVE-2024-47103

4.8
    IBM Sterling B2B Integrator Standard Edition
Published: January 31, 2025

CVE-2024-13216

4.3
    HT Event - WordPress Event Manager Plugin for Elementor
Published: January 31, 2025

CVE-2024-13415

4.3
    Food Menu - Restaurant Menu & Online Ordering for WooCommerce plugin for WordPress
Published: January 31, 2025

CVE-2024-13424

4.3
    Ni Sales Commission For WooCommerce plugin for WordPress
Published: January 31, 2025

CVE-2024-13717

4.3
    Contact Form and Calls To Action by vcita plugin for WordPress
Published: January 31, 2025

CVE-2024-13530

4.3
    Custom Login Page Styler plugin for WordPress
Published: January 31, 2025

CVE-2023-38739

4.3
    IBM Sterling B2B Integrator
Published: January 31, 2025

CVE-2024-11741

4.3
    Grafana
Published: January 31, 2025

CVE-2024-45089

4.3
    IBM Sterling B2B Integrator
Published: January 31, 2025

CVE-2025-24336

3.3
    SXF Common Library
Published: January 31, 2025

CVE-2020-11936

3.1
    UNKNOWN
Published: January 31, 2025

CVE-2023-6195

2.6
    GitLab CE/EE
Published: January 31, 2025

CVE-2024-23928

None
    Pioneer DMH-WT7600NEX devices
Published: January 31, 2025

CVE-2024-23937

None
    Silicon Labs Gecko OS
Published: January 31, 2025

CVE-2024-23962

None
    Alpine Halo9
Published: January 31, 2025

CVE-2024-23963

None
    Alpine Halo9
Published: January 31, 2025

CVE-2024-23920

None
    ChargePoint Home Flex charging stations
Published: January 31, 2025

CVE-2024-23921

None
    ChargePoint Home Flex charging stations
Published: January 31, 2025

CVE-2024-23929

None
    Pioneer DMH-WT7600NEX
Published: January 31, 2025

CVE-2024-13817

None
    UNKNOWN
Published: January 31, 2025

CVE-2024-46974

None
    UNKNOWN
Published: January 31, 2025

CVE-2024-47891

None
    UNKNOWN
Published: January 31, 2025

CVE-2024-47898

None
    UNKNOWN
Published: January 31, 2025

CVE-2024-47899

None
    UNKNOWN
Published: January 31, 2025

CVE-2024-47900

None
    UNKNOWN
Published: January 31, 2025

CVE-2024-12772

None
    Ninja Tables WordPress plugin
Published: January 31, 2025

CVE-2024-13101

None
    WP MediaTagger WordPress plugin
Published: January 31, 2025

CVE-2024-13112

None
    WP MediaTagger WordPress plugin
Published: January 31, 2025

CVE-2024-13218

None
    Fast Tube WordPress plugin
Published: January 31, 2025

CVE-2024-13220

None
    WordPress Google Map Professional (Map In Your Language) WordPress plugin
Published: January 31, 2025

CVE-2024-13221

None
    Fantastic ElasticSearch WordPress plugin
Published: January 31, 2025

CVE-2024-13222

None
    User Messages WordPress plugin
Published: January 31, 2025

CVE-2024-13223

None
    Tabulate WordPress plugin
Published: January 31, 2025

CVE-2024-13224

None
    SlideDeck 1 Lite Content Slider WordPress plugin
Published: January 31, 2025

CVE-2024-13225

None
    ECT Home Page Products WordPress plugin
Published: January 31, 2025

CVE-2024-13226

None
    A5 Custom Login Page WordPress plugin
Published: January 31, 2025

CVE-2024-57948

None
    Linux kernel
Published: January 31, 2025

CVE-2025-21668

None
    Linux kernel
Published: January 31, 2025

CVE-2025-21677

None
    Linux kernel
Published: January 31, 2025

CVE-2025-21678

None
    Linux kernel
Published: January 31, 2025

CVE-2025-21679

None
    Linux Kernel
Published: January 31, 2025

CVE-2024-53537

None
    OpenPanel
Published: January 31, 2025

CVE-2024-53582

None
    OpenPanel
Published: January 31, 2025

CVE-2025-22994

None
    O2OA
Published: January 31, 2025

CVE-2025-23215

None
    PMD
Published: January 31, 2025

CVE-2024-42671

None
    slabiak Appointment Scheduler
Published: January 31, 2025

CVE-2024-47857

None
    PrivX
Published: January 31, 2025

CVE-2024-53584

None
    OpenPanel
Published: January 31, 2025

CVE-2024-57432

None
    mall-tiny
Published: January 31, 2025

CVE-2025-22957

None
    ZZCMS
Published: January 31, 2025

CVE-2025-0938

None
    Python
Published: January 31, 2025

CVE-2024-57433

None
    mall-tiny
Published: January 31, 2025
Click here to see more Vulnerabilities