Tag: 2025-02-20

8 Attack Reports | 125 Vulnerabilities

Attack reports

The Bleeding Edge of Phishing: darcula-suite 3.0 Enables DIY Phishing of Any Brand

The darcula-suite 3.0 represents a significant advancement in phishing capabilities, allowing criminals to easily create customized phishing campaigns targeting any brand. This new version, set to launch in February 2025, builds upon the previous darcula V2 platform, which has already impacted over…
phishing
phaas
2025-02-20
browser automation
deception techniques
diy phishing kit
card generation
admin dashboard
Published: February 20, 2025
Downloadable IOCs: 0

Finance Report: Who Targets Financial Institutions?

This report provides an overview of key cybercrime and state-sponsored threat actors targeting the financial sector in 2024. It highlights the critical role of Initial Access Brokers in enabling large-scale attacks, the persistent threat of ransomware and extortion groups, and the increasing sophis…
apt
phishing
ransomware
cybercrime
ransomhub
edrkillshifter
rustbucket
goldpickaxe
financial sector
2025-02-20
catb
initial access brokers
jsoutprox
tradertraitor
golddigger
state-sponsored threats
goldkefu
tycoon 2fa
banking trojans
sneaky 2fa
golddiggerplus
Published: February 20, 2025
Downloadable IOCs: 0

Bloody Wolf evolution: new targets, new tools

Bloody Wolf, a notorious threat actor, has shifted its tactics by replacing malware with the legitimate remote administration tool NetSupport. The group has expanded its targets to include organizations in both Kazakhstan and Russia, compromising over 400 systems. Their attack method involves phish…
phishing
russia
edr
netsupport
telegram
strrat
kazakhstan
2025-02-20
remote administration
jar files
Published: February 20, 2025
Downloadable IOCs: 0

Stately Taurus Activity in Southeast Asia Links to Bookworm Malware

Unit 42 researchers have discovered connections between Stately Taurus, a threat actor targeting ASEAN countries, and the Bookworm malware family. Analysis of infrastructure and code overlaps revealed links between recent Stately Taurus attacks and Bookworm samples dating back to 2015. The group ha…
dll sideloading
toneshell
pubload
modular malware
southeast asia
2025-02-20
asean
infrastructure overlap
bookworm
Published: February 20, 2025
Downloadable IOCs: 0

Demystifying PKT and Monero Cryptocurrency deployed on MSSQL servers

This analysis examines a recent cryptocurrency mining operation targeting MSSQL servers, focusing on PKT Classic and Monero cryptocurrencies. The attack exploits vulnerabilities to deploy mining tools, including PacketCrypt for PKT and XMRIG for Monero. The process involves using Windows utilities …
obfuscation
xmrig
exploitation
cryptocurrency mining
monero
packetcrypt
2025-02-20
pkt classic
mssql servers
Published: February 20, 2025
Downloadable IOCs: 0

Updated Shadowpad Malware Leads to Ransomware Deployment

A recent investigation revealed Shadowpad malware being used to deploy a new ransomware family in Europe. The threat actor targeted 21 companies across 15 countries, primarily in the manufacturing sector. Access was gained through remote network attacks, exploiting weak passwords and bypassing mult…
ransomware
plugx
shadowpad
impacket
manufacturing
anti-debugging
2025-02-20
dns over https
multi-factor authentication bypass
remote network attacks
intellectual property theft
cqhashdumpv2
Published: February 20, 2025
Downloadable IOCs: 0

Evolving Snake Keylogger Variant

A new variant of Snake Keylogger, identified as AutoIt/Injector.GTY!tr, has been detected by FortiSandbox v5.0. This malware has attempted over 280 million infections, primarily targeting China, Turkey, Indonesia, Taiwan, and Spain. Snake Keylogger steals sensitive information from popular web brow…
credential theft
autoit
keylogging
snake keylogger
process hollowing
2025-02-20
fortisandbox
ai detection
404 keylogger
paix
Published: February 20, 2025
Downloadable IOCs: 3

Trimble Cityworks: CVE-2025-0994: Active Exploitation

A high-severity deserialization vulnerability in Trimble Cityworks, CVE-2025-0994, affects versions before 15.8.9 and Office Companion versions before 23.10. This flaw allows authenticated attackers to execute remote code on Microsoft IIS web servers. Exploitation indicators suggest the use of Rust…
cobalt strike
remote code execution
critical infrastructure
CVE-2025-0994
2025-02-20
vshell
trimble cityworks
iis web server
deserialization vulnerability
Published: February 20, 2025
Linked vulnerabilities : CVE-2025-0994 (CVSS 8.8)
Downloadable IOCs: 16
Click here to see more Attack Reports

Vulnerabilities

CVE-2024-37361

9.9
    Hitachi Vantara Pentaho Business Analytics Server
Published: February 20, 2025

CVE-2025-1265

9.9
    Vinci Protocol Analyzer
Published: February 20, 2025

CVE-2024-13789

9.8
    Matiskiba
  • Ravpage
Published: February 20, 2025

CVE-2024-57401

9.8
    Unknown
Published: February 20, 2025

CVE-2025-27096

9.8
    Wegia
  • Wegia
Published: February 20, 2025

CVE-2025-24893

9.8
    XWiki Platform
Published: February 20, 2025

CVE-2024-54756

9.8
    GZDoom
Published: February 20, 2025

CVE-2025-25662

9.8
    Tenda O4
Published: February 20, 2025

CVE-2025-25663

9.8
    Tenda AC8
Published: February 20, 2025

CVE-2025-25664

9.8
    Tenda AC8V4
Published: February 20, 2025

CVE-2025-25667

9.8
    Tenda AC8V4
Published: February 20, 2025

CVE-2025-25668

9.8
    Tenda AC8V4
Published: February 20, 2025

CVE-2025-25674

9.8
    Tenda AC10
Published: February 20, 2025

CVE-2025-25675

9.8
    Tenda AC10
Published: February 20, 2025

CVE-2025-25676

9.8
    Tenda i12
Published: February 20, 2025

CVE-2025-25678

9.8
    Tenda i12
Published: February 20, 2025

CVE-2025-20059

9.1
    Ping Identity PingAM Java Policy Agent
Published: February 20, 2025

CVE-2023-51311

8.8
    PHPJabbers Car Park Booking System
Published: February 20, 2025

CVE-2023-51313

8.8
    PHPJabbers Restaurant Booking System
Published: February 20, 2025

CVE-2023-51319

8.8
    PHPJabbers Bus Reservation System
Published: February 20, 2025

CVE-2023-51333

8.8
    PHPJabbers Cinema Booking System
Published: February 20, 2025

CVE-2023-51336

8.8
    PHPJabbers Meeting Room Booking System
Published: February 20, 2025

CVE-2025-1293

8.2
    Hermes
Published: February 20, 2025

CVE-2025-26304

8.2
    libming
Published: February 20, 2025

CVE-2025-26305

8.2
    libming
Published: February 20, 2025

CVE-2024-13753

8.1
    Webcodingplace
  • Ultimate Classified Listings
Published: February 20, 2025

CVE-2025-25679

8.0
    Tenda i12
Published: February 20, 2025

CVE-2025-1492

7.8
    Wireshark
Published: February 20, 2025

CVE-2025-0161

7.8
    IBM Security Verify Access Appliance
Published: February 20, 2025

CVE-2024-46933

7.7
    Atos Eviden BullSequana XH2140 BMC
Published: February 20, 2025

CVE-2024-13476

7.5
    Eniture
  • Ltl Freight Quotes
Published: February 20, 2025

CVE-2023-51314

7.5
    PHPJabbers Restaurant Booking System
Published: February 20, 2025

CVE-2023-51316

7.5
    PHPJabbers Bus Reservation System
Published: February 20, 2025

CVE-2024-57716

7.5
    AutoQueryable
Published: February 20, 2025

CVE-2025-27091

7.5
    Cisco
  • Openh264
Published: February 20, 2025

CVE-2025-0352

7.5
    Rapid Response Monitoring My Security Account App
Published: February 20, 2025

CVE-2025-27097

7.5
    The-Guild
  • Graphql Mesh
Published: February 20, 2025

CVE-2025-22973

7.5
    QiboSoft QiboCMS X
Published: February 20, 2025

CVE-2024-13792

7.3
    Ex-Themes
  • Woocommerce Food
Published: February 20, 2025

CVE-2025-26856

7.2
    UD-LT2 firmware
Published: February 20, 2025

CVE-2024-13888

7.2
    Amauri
  • Wpmobile.App
Published: February 20, 2025

CVE-2025-1039

7.2
    Lenix Elementor Leads addon plugin for WordPress
Published: February 20, 2025

CVE-2024-49781

7.1
    Ibm
  • Openpages With Watson
    Linux
    Microsoft
Published: February 20, 2025

CVE-2024-49782

6.8
    Ibm
  • Openpages With Watson
    Linux
    Microsoft
Published: February 20, 2025

CVE-2025-21105

6.6
    Dell RecoverPoint for Virtual Machines
Published: February 20, 2025

CVE-2024-37363

6.5
    Hitachi Vantara Pentaho Business Analytics Server
Published: February 20, 2025

CVE-2024-6697

6.5
    Hitachi Vantara Pentaho Business Analytics Server
Published: February 20, 2025

CVE-2025-0866

6.5
    Legoeso
  • Pdf Manager
Published: February 20, 2025

CVE-2023-51317

6.5
    PHPJabbers Restaurant Booking System
Published: February 20, 2025

CVE-2023-51321

6.5
    PHPJabbers Night Club Booking Software
Published: February 20, 2025

CVE-2023-51323

6.5
    PHPJabbers Shared Asset Booking System
Published: February 20, 2025

CVE-2023-51324

6.5
    PHPJabbers Shared Asset Booking System
Published: February 20, 2025

CVE-2023-51326

6.5
    PHPJabbers Cleaning Business Software
Published: February 20, 2025

CVE-2023-51327

6.5
    PHPJabbers Cleaning Business Software
Published: February 20, 2025

CVE-2023-51331

6.5
    PHPJabbers Cleaning Business Software
Published: February 20, 2025

CVE-2025-26306

6.5
    libming
Published: February 20, 2025

CVE-2025-26307

6.5
    libming
Published: February 20, 2025

CVE-2025-26308

6.5
    libming
Published: February 20, 2025

CVE-2025-26309

6.5
    libming
Published: February 20, 2025

CVE-2025-26310

6.5
    libming
Published: February 20, 2025

CVE-2025-26311

6.5
    libming
Published: February 20, 2025

CVE-2023-51335

6.5
    PHPJabbers Cinema Booking System
Published: February 20, 2025

CVE-2024-54960

6.5
    Nagios XI
Published: February 20, 2025

CVE-2024-54961

6.5
    Nagios XI
Published: February 20, 2025

CVE-2024-55457

6.5
    MasterSAM Star Gate
Published: February 20, 2025

CVE-2025-25973

6.5
    Ppress
Published: February 20, 2025

CVE-2023-51339

6.5
    PHPJabbers Event Ticketing System
Published: February 20, 2025

CVE-2024-13445

6.4
    Elementor
  • Website Builder
Published: February 20, 2025

CVE-2024-13155

6.4
    Unlimited-Elements
  • Unlimited Elements For Elementor
Published: February 20, 2025

CVE-2025-0897

6.4
    Wow-Company
  • Modal Window
Published: February 20, 2025

CVE-2025-1064

6.4
    Xootix
  • Login\/Signup Popup
Published: February 20, 2025

CVE-2024-13802

6.4
    Bandsintown
  • Bandsintown
Published: February 20, 2025

CVE-2024-6432

6.4
    Vanderwijk
  • Content Blocks
Published: February 20, 2025

CVE-2025-1328

6.4
    Mrlegend1235
  • Typed Js
Published: February 20, 2025

CVE-2025-1043

6.4
    Embed Any Document plugin for WordPress
Published: February 20, 2025

CVE-2024-37362

6.3
    Hitachi Vantara Pentaho Data Integration & Analytics
Published: February 20, 2025

CVE-2023-51308

6.1
    PHPJabbers Car Park Booking System
Published: February 20, 2025

CVE-2024-54958

6.1
    Nagios XI
Published: February 20, 2025

CVE-2024-54959

6.1
    Nagios XI
Published: February 20, 2025

CVE-2025-25960

6.1
    phpcmsv9
Published: February 20, 2025

CVE-2025-25957

6.1
    Xunruicms
Published: February 20, 2025

CVE-2025-25968

6.0
    Acora CMS
Published: February 20, 2025

CVE-2025-27098

5.8
    The-Guild
  • Graphql Mesh Cli
  • Graphql Mesh Http
Published: February 20, 2025

CVE-2024-13849

5.5
    Dcurasi
  • Cookie Notice Bar
Published: February 20, 2025

CVE-2025-21106

5.5
    Dell Recover Point for Virtual Machines
Published: February 20, 2025

CVE-2024-49337

5.4
    Ibm
  • Openpages With Watson
    Linux
    Microsoft
Published: February 20, 2025

CVE-2023-51306

5.4
    PHPJabbers Event Ticketing System
Published: February 20, 2025

CVE-2023-51312

5.4
    PHPJabbers Restaurant Booking System
Published: February 20, 2025

CVE-2023-51315

5.4
    PHPJabbers Restaurant Booking System
Published: February 20, 2025

CVE-2023-51318

5.4
    PHPJabbers Bus Reservation System
Published: February 20, 2025

CVE-2023-51325

5.4
    PHPJabbers Shared Asset Booking System
Published: February 20, 2025

CVE-2023-51330

5.4
    PHPJabbers Cinema Booking System
Published: February 20, 2025

CVE-2023-51337

5.4
    PHPJabbers Event Ticketing System
Published: February 20, 2025

CVE-2023-51338

5.4
    PHPJabbers Meeting Room Booking System
Published: February 20, 2025

CVE-2025-25958

5.4
    phpcmsv9
Published: February 20, 2025

CVE-2025-23020

5.3
    Kwik
Published: February 20, 2025

CVE-2025-24946

5.3
    picoquic
Published: February 20, 2025

CVE-2025-24947

5.3
    LSQUIC
Published: February 20, 2025

CVE-2024-49355

5.3
    Ibm
  • Openpages With Watson
    Linux
    Microsoft
Published: February 20, 2025

CVE-2024-49780

5.3
    Ibm
  • Openpages With Watson
    Linux
    Microsoft
Published: February 20, 2025

CVE-2025-27218

5.3
    Sitecore Experience Manager (XM)
    Sitecore Experience Platform (XP)
Published: February 20, 2025

CVE-2024-13520

5.3
    Codemenschen
  • Gift Vouchers
Published: February 20, 2025

CVE-2025-1483

5.3
    Wwexgroup
  • Ltl Freight Quotes
Published: February 20, 2025

CVE-2023-51320

5.3
    PHPJabbers Night Club Booking Software
Published: February 20, 2025

CVE-2023-51334

5.3
    PHPJabbers Cinema Booking System
Published: February 20, 2025

CVE-2024-6696

4.9
    Hitachi Vantara Pentaho Business Analytics Server
Published: February 20, 2025

CVE-2024-13748

4.4
    Webcodingplace
  • Ultimate Classified Listings
Published: February 20, 2025

CVE-2024-43196

4.3
    Ibm
  • Openpages With Watson
    Linux
    Microsoft
Published: February 20, 2025

CVE-2024-13855

4.3
    Nilambar
  • Prime Addons For Elementor
Published: February 20, 2025

CVE-2024-49344

4.3
    Ibm
  • Openpages With Watson
    Linux
    Microsoft
Published: February 20, 2025

CVE-2024-49779

4.3
    Ibm
  • Openpages With Watson
    Linux
    Microsoft
Published: February 20, 2025

CVE-2023-51309

4.3
    PHPJabbers Car Park Booking System
Published: February 20, 2025

CVE-2023-51310

4.3
    PHPJabbers Car Park Booking System
Published: February 20, 2025

CVE-2023-51332

4.3
    PHPJabbers Meeting Room Booking System
Published: February 20, 2025

CVE-2024-12284

None
    Citrix NetScaler
Published: February 20, 2025

CVE-2025-0112

None
    Palo Alto Networks Cortex XDR agent
Published: February 20, 2025

CVE-2025-1222

None
    Citrix Secure Access Client for Mac
Published: February 20, 2025

CVE-2025-1223

None
    Citrix Secure Access Client for Mac
Published: February 20, 2025

CVE-2025-0868

None
    DocsGPT
Published: February 20, 2025

CVE-2025-1258

None
    UNKNOWN
Published: February 20, 2025

CVE-2024-7141

None
    Gliffy Online
Published: February 20, 2025

CVE-2025-26618

None
    OTP (Open Telecom Platform)
Published: February 20, 2025

CVE-2025-25299

None
    CKEditor 5
Published: February 20, 2025

CVE-2024-7131

None
    UNKNOWN
Published: February 20, 2025

CVE-2025-27088

None
    oxyno-zeta/s3-proxy
Published: February 20, 2025
Click here to see more Vulnerabilities