Tag: 2025-02-10

3 Attack Reports | 73 Vulnerabilities

Attack reports

The Anatomy of Abyss Locker Ransomware Attack

Abyss Locker (AKA Abyss ransomware) is a relatively new threat group that emerged in 2023, specializing in swift and decisive intrusions designed to cripple victims with ransomware. Abyss Locker was active throughout 2024, causing multiple incidents investigated by Sygnia. However, no recent techni…
backdoor
ransomware
rclone
persistence
service
esxi
chisel
psexec
2025-02-10
file
locker
abyss locker
defender
smbexec
strong
vulnerable
remcom
impact
story
patch
restrict
velvet
ssh tunneling
Published: February 10, 2025
Downloadable IOCs: 15

GetSmoked: UAC-0006 Returns With SmokeLoader Targeting Ukraine's Largest State-Owned Bank

UAC-0006, a financially motivated cyber threat group, has resurfaced with a sophisticated phishing campaign targeting customers of Ukraine’s largest state-owned bank, PrivatBank.
powershell
ukraine
javascript
black basta
vbscript
smokeloader
uac-0006
carbanak
anunak
defense evasion
sha256
2025-02-10
fin7
uac0006
privatbank
bank
model
demo
Published: February 10, 2025
Downloadable IOCs: 62

LegionLoader exposed!

LegionLoader, also known as Satacom, CurlyGate, and RobotDropper, is an active downloader malware that has gained significant traction recently, amassing over 2,000 samples in weeks. The campaign appears to have started on December 19, 2024, with Brazil being the most affected country. The malware …
brazil
downloader
drive-by download
anti-sandbox
msi
multi-stage
legionloader
robotdropper
2025-02-10
satacom
dll injection
curlygate
Published: February 10, 2025
Downloadable IOCs: 108
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-24016

9.9
    Wazuh
Published: February 10, 2025

CVE-2024-13011

9.8
    WP Foodbakery plugin for WordPress
Published: February 10, 2025

CVE-2024-11621

8.8
    Devolutions Remote Desktop Manager
    Devolutions Remote Desktop Manager
    Devolutions Remote Desktop Manager
    Devolutions Remote Desktop Manager
    Devolutions Remote Desktop Manager
Published: February 10, 2025

CVE-2024-27859

8.8
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: February 10, 2025

CVE-2024-46429

8.8
    Tenda W18E
Published: February 10, 2025

CVE-2024-46432

8.8
    Tenda W18E
Published: February 10, 2025

CVE-2024-46433

8.8
    Tenda W18E
Published: February 10, 2025

CVE-2024-46434

8.8
    Tenda W18E
Published: February 10, 2025

CVE-2024-42512

8.6
    OPC UA .NET Standard Stack
Published: February 10, 2025

CVE-2024-8684

8.3
    Revolution Pi
Published: February 10, 2025

CVE-2024-46436

8.3
    Tenda W18E
Published: February 10, 2025

CVE-2025-1193

8.1
    Devolutions Remote Desktop Manager
Published: February 10, 2025

CVE-2024-54954

8.0
    OneBlog
Published: February 10, 2025

CVE-2024-46431

8.0
    Tenda W18E
Published: February 10, 2025

CVE-2024-46435

8.0
    Tenda W18E
Published: February 10, 2025

CVE-2025-21687

7.8
    Linux
  • Linux Kernel
Published: February 10, 2025

CVE-2025-21692

7.8
    Linux
  • Linux Kernel
Published: February 10, 2025

CVE-2025-21693

7.8
    Linux Kernel
Published: February 10, 2025

CVE-2024-8550

7.5
    modelscope/agentscope
Published: February 10, 2025

CVE-2025-24970

7.5
    Netty
Published: February 10, 2025

CVE-2024-10334

7.3
    System 800xA
Published: February 10, 2025

CVE-2024-57407

7.3
    Timo
Published: February 10, 2025

CVE-2024-57177

7.3
    NPM package of perfood/couch-auth
Published: February 10, 2025

CVE-2025-1156

7.3
    Pix Software Vivaz
Published: February 10, 2025

CVE-2025-1160

7.3
    Remyandrade
  • Employee Management System
Published: February 10, 2025

CVE-2024-57408

7.2
    cool-admin-java
Published: February 10, 2025

CVE-2024-13059

7.2
    mintplex-labs/anything-llm
Published: February 10, 2025

CVE-2025-25186

6.5
    Net::IMAP Ruby Gem
Published: February 10, 2025

CVE-2024-46430

6.5
    Tenda W18E
Published: February 10, 2025

CVE-2024-46437

6.5
    Tenda W18E
Published: February 10, 2025

CVE-2024-54658

6.5
    Apple
  • Safari
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Visionos
  • Watchos
Published: February 10, 2025

CVE-2025-1154

6.3
    xxyopen Novel
Published: February 10, 2025

CVE-2025-1157

6.3
    Unknown
Published: February 10, 2025

CVE-2025-1158

6.3
    ESAFENET CDG
Published: February 10, 2025

CVE-2025-1162

6.3
    Job Recruitment
Published: February 10, 2025

CVE-2025-25247

6.1
    Apache Felix Webconsole
Published: February 10, 2025

CVE-2025-1175

6.1
    Kelio Visio
Published: February 10, 2025

CVE-2024-10649

6.1
    wandb/openui
Published: February 10, 2025

CVE-2024-13010

6.1
    WP Foodbakery plugin for WordPress
Published: February 10, 2025

CVE-2025-24200

6.1
    Apple
  • Ipados
  • Iphone Os
Published: February 10, 2025

CVE-2024-57178

5.9
    Stock-Forecaster
Published: February 10, 2025

CVE-2025-1002

5.7
    Microdicom
  • Dicom Viewer
Published: February 10, 2025

CVE-2024-57950

5.5
    Linux
  • Linux Kernel
Published: February 10, 2025

CVE-2025-21689

5.5
    Linux
  • Linux Kernel
Published: February 10, 2025

CVE-2025-21690

5.5
    Linux
  • Linux Kernel
Published: February 10, 2025

CVE-2025-25193

5.5
    Netty
Published: February 10, 2025

CVE-2024-11831

5.4
    npm-serialize-javascript
Published: February 10, 2025

CVE-2024-48170

5.4
    Phpgurukul
  • Small Crm
Published: February 10, 2025

CVE-2024-12133

5.3
    libtasn1
Published: February 10, 2025

CVE-2024-12243

5.3
    GnuTLS
Published: February 10, 2025

CVE-2024-42513

5.3
    OPC UA .NET Standard Stack
Published: February 10, 2025

CVE-2024-57409

4.8
    cool-admin-java
Published: February 10, 2025

CVE-2025-21688

4.7
    Linux
  • Linux Kernel
Published: February 10, 2025

CVE-2024-8685

4.3
    Revolution Pi
Published: February 10, 2025

CVE-2025-1155

4.3
    Webkul QloApps
Published: February 10, 2025

CVE-2025-25194

4.0
    activitypub_federation
    Lemmy
Published: February 10, 2025

CVE-2025-24892

3.5
    OpenProject
Published: February 10, 2025

CVE-2025-1159

3.5
    CampCodes School Management Software
Published: February 10, 2025

CVE-2025-1147

3.1
    Gnu
  • Binutils
Published: February 10, 2025

CVE-2025-1148

3.1
    Gnu
  • Binutils
Published: February 10, 2025

CVE-2025-1149

3.1
    Gnu
  • Binutils
Published: February 10, 2025

CVE-2025-1150

3.1
    Gnu
  • Binutils
Published: February 10, 2025

CVE-2025-1151

3.1
    Gnu
  • Binutils
Published: February 10, 2025

CVE-2025-1152

3.1
    Gnu
  • Binutils
Published: February 10, 2025

CVE-2025-1153

3.1
    Gnu
  • Binutils
Published: February 10, 2025

CVE-2025-1099

None
    TP-Link Tapo C500
Published: February 10, 2025

CVE-2025-21686

None
    Linux kernel
Published: February 10, 2025

CVE-2025-21691

None
    Linux kernel
Published: February 10, 2025

CVE-2025-24031

None
    PAM-PKCS#11
Published: February 10, 2025

CVE-2025-24032

None
    PAM-PKCS#11
Published: February 10, 2025

CVE-2025-25188

None
    Hickory DNS
Published: February 10, 2025

CVE-2025-25189

None
    ZOO-Project
Published: February 10, 2025

CVE-2025-25190

None
    ZOO-Project Web Processing Service (WPS) Server
Published: February 10, 2025
Click here to see more Vulnerabilities