Tag: 2025-02-17

5 Attack Reports | 49 Vulnerabilities

Attack reports

Chinese-Speaking Group Manipulates SEO with BadIIS

A Chinese-speaking group is conducting an SEO manipulation campaign in Asia using BadIIS malware. The campaign targets vulnerable Internet Information Services (IIS) servers, compromising them to redirect users to illegal gambling sites or malicious servers. Affected regions include India, Thailand…
malware injection
2025-02-17
seo manipulation
badiis
iis exploitation
asia
gambling websites
Published: February 17, 2025
Downloadable IOCs: 137

Don't Ghost the SocGholish: GhostWeaver Backdoor

The article details a sophisticated malware infection chain involving SocGholish, MintsLoader, and the GhostWeaver backdoor. The attack begins with a fake browser update, progressing through multiple stages to deploy a PowerShell backdoor and various plugins. These components work together to steal…
backdoor
powershell
cryptocurrency
socgholish
credential theft
boinc
fakeupdates
netsupport rat
mintsloader
2025-02-17
web injection
ghostweaver
juniper stealer
Published: February 17, 2025
Downloadable IOCs: 14

Lumma Stealer Chronicles: PDF-themed Campaign Using Compromised Educational Institutions' Infrastructure

An ongoing malware campaign is distributing Lumma Stealer, an information-stealing malware, through malicious LNK files disguised as PDF documents. The campaign exploits compromised educational institutions' infrastructure to host these files. When executed, the LNK files initiate a multi-stage inf…
phishing
lumma stealer
information stealing
maas
lnk files
multi-stage infection
2025-02-17
steam profiles
educational institutions
pdf-themed
Published: February 17, 2025
Downloadable IOCs: 24

FinStealer

A sophisticated malware campaign exploits a leading Indian bank's brand through fraudulent mobile applications. Distributed via phishing links and social engineering, these fake apps mimic legitimate bank apps, tricking users into revealing sensitive information. The malware uses advanced evasion t…
sql injection
phishing
android
credential theft
banking
telegram
mobile
c2 servers
xor encryption
2025-02-17
finstealer
trojan.rewardsteal/joxpk
CVE-2011-2688
Published: February 17, 2025
Linked vulnerabilities : CVE-2011-2688
Downloadable IOCs: 5

Ransomware Roundup – Lynx

The Lynx ransomware, first detected in July 2024, is a Windows-targeting malware that encrypts files and demands ransom for decryption. It shares similarities with the INC ransomware but offers more granular control. Lynx encrypts files with a .LYNX extension, changes desktop backgrounds, and print…
ransomware
windows
encryption
construction
data leak
manufacturing
2025-02-17
brave prince
lynx
Published: February 17, 2025
Downloadable IOCs: 9
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-1387

9.8
    Orca HCM
Published: February 17, 2025

CVE-2025-1388

8.8
    Orca HCM
Published: February 17, 2025

CVE-2025-1389

8.8
    Orca HCM
Published: February 17, 2025

CVE-2024-13726

8.6
    Coder WordPress plugin
Published: February 17, 2025

CVE-2025-0591

7.8
    CX-Programmer
Published: February 17, 2025

CVE-2025-21103

7.8
    Dell NetWorker Management Console
Published: February 17, 2025

CVE-2025-0924

7.2
    WP Activity Log plugin for WordPress
Published: February 17, 2025

CVE-2024-13625

7.1
    Tube Video Ads Lite WordPress plugin
Published: February 17, 2025

CVE-2024-13626

7.1
    VR-Frases WordPress plugin
Published: February 17, 2025

CVE-2025-23840

7.1
    WP-NOTCAPTCHA
Published: February 17, 2025

CVE-2025-23845

7.1
    ERA404 ImageMeta
Published: February 17, 2025

CVE-2024-47935

6.7
    TXOne Networks StellarProtect (Legacy Mode)
    StellarEnforce
    Safe Lock
Published: February 17, 2025

CVE-2025-0001

6.5
    Abacus ERP
Published: February 17, 2025

CVE-2025-0714

6.5
    Mobateks MobaXterm
Published: February 17, 2025

CVE-2025-26754

6.5
    bPlugins Timeline Block
Published: February 17, 2025

CVE-2025-26769

6.5
    Vertex Addons for Elementor
Published: February 17, 2025

CVE-2025-26770

6.5
    Waymark
Published: February 17, 2025

CVE-2025-26771

6.5
    SKT Blocks - Gutenberg based Page Builder
Published: February 17, 2025

CVE-2025-26772

6.5
    Detheme DethemeKit For Elementor
Published: February 17, 2025

CVE-2025-1374

6.3
    Fabianros
  • Real Estate Property Management System
Published: February 17, 2025

CVE-2025-1379

6.3
    Real Estate Property Management System
Published: February 17, 2025

CVE-2025-1380

6.3
    Codezips Gym Management System
Published: February 17, 2025

CVE-2025-1381

6.3
    code-projects Real Estate Property Management System
Published: February 17, 2025

CVE-2024-13603

6.1
    Wise Forms WordPress plugin
Published: February 17, 2025

CVE-2025-26775

5.9
    BEAR
Published: February 17, 2025

CVE-2025-26778

5.9
    NotFound Gallery
Published: February 17, 2025

CVE-2024-13879

5.5
    WordPress Stream plugin
Published: February 17, 2025

CVE-2025-1391

5.4
    Keycloak
Published: February 17, 2025

CVE-2025-1365

5.3
    GNU elfutils
Published: February 17, 2025

CVE-2025-1366

5.3
    MicroWord eScan Antivirus
Published: February 17, 2025

CVE-2025-1367

5.3
    MicroWord eScan Antivirus
Published: February 17, 2025

CVE-2025-1370

5.3
    MicroWorld eScan Antivirus
Published: February 17, 2025

CVE-2025-1372

5.3
    GNU elfutils
Published: February 17, 2025

CVE-2025-26758

5.3
    Spotlight Social Media Feeds
Published: February 17, 2025

CVE-2025-26700

5.2
    RoboForm Password Manager App for Android
Published: February 17, 2025

CVE-2024-13608

4.7
    Track Logins WordPress plugin
Published: February 17, 2025

CVE-2024-13627

4.7
    OWL Carousel Slider WordPress plugin
Published: February 17, 2025

CVE-2025-1369

4.5
    MicroWord eScan Antivirus
Published: February 17, 2025

CVE-2025-26773

4.3
    Analytify
Published: February 17, 2025

CVE-2024-25066

4.3
    RSA Authentication Manager
Published: February 17, 2025

CVE-2025-1392

3.5
    D-Link DIR-816
Published: February 17, 2025

CVE-2025-1371

3.3
    GNU elfutils
Published: February 17, 2025

CVE-2025-1373

3.3
    FFmpeg
Published: February 17, 2025

CVE-2025-1377

3.3
    GNU elfutils
Published: February 17, 2025

CVE-2025-1378

3.3
    radare2
Published: February 17, 2025

CVE-2025-1376

2.5
    GNU elfutils
Published: February 17, 2025

CVE-2025-1368

2.3
    MicroWorld eScan Antivirus
Published: February 17, 2025

CVE-2024-13837

None
    UNKNOWN
Published: February 17, 2025

CVE-2021-30369

None
    UNKNOWN
Published: February 17, 2025
Click here to see more Vulnerabilities