Tag: 2025-03-05

7 Attack Reports | 143 Vulnerabilities

Attack reports

The Evolution of Dark Caracal Tools: Campaign Analysis Using the Poco RAT

Attacks using the Poco RAT are a continuation of the Dark Caracal group's campaign. This campaign was launched in 2022 and is aimed at Spanish-speaking countries in Latin America.
rat
phishing
windows
2025-03-05
vmware
bandook
poco rat
ultimate packer
executables
virtualbox
dark caracal
poco c++
Published: March 5, 2025
Downloadable IOCs: 41

New DDoS Botnet Discovered: Over 30,000 Hacked Devices, Majority of Observed Activity Traced to Iran

A new botnet that infects tens of thousands of internet-connected devices has been identified as being linked to Iran, according to research by GreyNoise and Nokia Deepfield. and Censys.
ddos
botnet
2025-03-05
team
telnet
greynoise
eleven11bot
deepfield
nvrs
Published: March 5, 2025
Downloadable IOCs: 1428

Beneath the Surface: Detecting and Blocking Hidden Malicious Traffic Distribution Systems

This analysis explores the use of traffic distribution systems (TDS) by threat actors to redirect network traffic for illicit purposes like phishing and malvertising. TDS act as central hubs, obfuscating final destinations and hindering detection. The study found that malicious TDS exhibit distinct…
phishing
malvertising
2025-03-05
cloaking
darknet
traffic distribution systems
Published: March 5, 2025
Downloadable IOCs: 0

Winos 4.0 Spreads via Impersonation of Official Email to Target Users in Taiwan

An advanced malware framework known as Winos4.0 was used to target companies in Taiwan in January 2025.
phishing
pdf
c2 server
valleyrat
wechat
screen capture
agent
2025-03-05
team
uacme
corrupt
Published: March 5, 2025
Downloadable IOCs: 55

Astrill VPN and DPRK Remote Worker Fraud

Spur Engineering is releasing a comprehensive list of IP addresses associated with the Astrill VPN service to help companies protect against fraud and abuse from the Democratic Republic of Korea (DPRK) in the future.
north korea
fraud
vpn
dprk
infrastructure
astrill vpn
2025-03-05
Published: March 5, 2025
Downloadable IOCs: 2360

Remcos RAT Targets Europe: New AMSI and ETW Evasion Tactics Uncovered

This week, the SonicWall threat research team discovered a new update in the Remcos infection chain aimed at enhancing its stealth by patching AMSI scanning and ETW logging to evade detection. This loader was seen distributing Async RAT in the past but now it has extended its functionality to Remco…
rat
phishing
powershell
remcos
2025-03-05
zip
vb script
Published: March 5, 2025
Downloadable IOCs: 7

SilentCryptoMiner distributed as a bypass tool

A mass malware campaign is infecting users with a cryptocurrency miner disguised as a tool for bypassing internet restrictions. The campaign has affected over 2,000 victims in Russia, utilizing YouTube channels to spread malicious links. Attackers are blackmailing content creators to post videos wi…
xworm
xmrig
njrat
dcrat
stealth techniques
cryptocurrency mining
silentcryptominer
2025-03-05
phemedrone
blackmail
restriction bypass
python loader
Published: March 5, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-25015

9.9
    Kibana
Published: March 5, 2025

CVE-2025-1316

9.8
    Edimax IC-7100
Published: March 5, 2025

CVE-2025-23410

9.8
    GMOD Apollo
Published: March 5, 2025

CVE-2025-24924

9.8
    GMOD Apollo
Published: March 5, 2025

CVE-2025-27638

9.8
    Vasion Print (formerly PrinterLogic)
Published: March 5, 2025

CVE-2025-27640

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27641

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27642

9.8
    Vasion Print (formerly PrinterLogic)
Published: March 5, 2025

CVE-2025-27643

9.8
    Vasion Print (formerly PrinterLogic)
Published: March 5, 2025

CVE-2025-27645

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27646

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27647

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27648

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27649

9.8
    Vasion Print (formerly PrinterLogic)
Published: March 5, 2025

CVE-2025-27650

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27651

9.8
    Vasion Print (formerly PrinterLogic)
Published: March 5, 2025

CVE-2025-27652

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27655

9.8
    Vasion Print (PrinterLogic)
Published: March 5, 2025

CVE-2025-27656

9.8
    Vasion Print (formerly PrinterLogic)
Published: March 5, 2025

CVE-2025-27657

9.8
    Vasion Print
Published: March 5, 2025

CVE-2025-27658

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27659

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27662

9.8
    Vasion Print (formerly PrinterLogic)
Published: March 5, 2025

CVE-2025-27663

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27665

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27666

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27667

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27668

9.8
    Vasion Print (formerly PrinterLogic)
Published: March 5, 2025

CVE-2025-27670

9.8
    Vasion Print (formerly PrinterLogic)
Published: March 5, 2025

CVE-2025-27671

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27672

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27674

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27675

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27677

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27678

9.8
    Vasion Print (formerly PrinterLogic)
Published: March 5, 2025

CVE-2025-27681

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27682

9.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-1393

9.8
    UNKNOWN
Published: March 5, 2025

CVE-2024-13787

9.8
    VEDA - MultiPurpose WordPress Theme theme for WordPress
Published: March 5, 2025

CVE-2025-1515

9.8
    WP Real Estate Manager plugin for WordPress
Published: March 5, 2025

CVE-2024-11951

9.8
    Homey Login Register plugin for WordPress
Published: March 5, 2025

CVE-2024-12281

9.8
    Homey theme for WordPress
Published: March 5, 2025

CVE-2024-12097

9.8
    Boceksoft Informatics E-Travel
Published: March 5, 2025

CVE-2024-13147

9.8
    Merkur Software B2B Login Panel
Published: March 5, 2025

CVE-2023-38693

9.8
    Lucee Server
Published: March 5, 2025

CVE-2025-25362

9.8
    Spacy-LLM
Published: March 5, 2025

CVE-2025-25632

9.8
    Tenda AC15
Published: March 5, 2025

CVE-2025-27661

9.1
    Vasion Print (formerly PrinterLogic)
Published: March 5, 2025

CVE-2025-27673

9.1
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27680

9.1
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-1914

8.8
    Google Chrome
Published: March 5, 2025

CVE-2025-1916

8.8
    Google Chrome
Published: March 5, 2025

CVE-2025-1918

8.8
    Google Chrome
Published: March 5, 2025

CVE-2025-1919

8.8
    Google Chrome
Published: March 5, 2025

CVE-2025-27639

8.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27664

8.8
    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27683

8.8
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2024-13232

8.8
    WordPress Awesome Import & Export Plugin
Published: March 5, 2025

CVE-2024-51144

8.8
    Ampache
Published: March 5, 2025

CVE-2024-0114

8.1
    NVIDIA Hopper HGX for 8-GPU
Published: March 5, 2025

CVE-2025-1915

8.1
    Google Chrome
Published: March 5, 2025

CVE-2024-13777

8.1
    ZoomSounds - WordPress Wave Audio Player with Playlist plugin
Published: March 5, 2025

CVE-2025-0956

8.1
    WooCommerce Recover Abandoned Cart plugin
Published: March 5, 2025

CVE-2024-57174

8.1
    Alphion ASEE-1443 Firmware
Published: March 5, 2025

CVE-2025-27644

7.8
    Vasion Print (formerly PrinterLogic)
Published: March 5, 2025

CVE-2024-11216

7.6
    PozitifIK Pik Online
Published: March 5, 2025

CVE-2025-27669

7.5
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27684

7.5
    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27685

7.5
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2024-13471

7.5
    DesignThemes Core Features plugin for WordPress
Published: March 5, 2025

CVE-2025-1702

7.5
    Ultimate Member Plugin for WordPress
Published: March 5, 2025

CVE-2024-53458

7.5
    Sysax Multi Server
Published: March 5, 2025

CVE-2025-27513

7.5
    OpenTelemetry dotnet
Published: March 5, 2025

CVE-2025-27508

7.5
    Emissary
Published: March 5, 2025

CVE-2025-1962

7.3
    projectworlds Online Hotel Booking
Published: March 5, 2025

CVE-2025-1963

7.3
    projectworlds Online Hotel Booking
Published: March 5, 2025

CVE-2025-1964

7.3
    projectworlds Online Hotel Booking
Published: March 5, 2025

CVE-2025-1965

7.3
    projectworlds Online Hotel Booking
Published: March 5, 2025

CVE-2025-1966

7.3
    PHPGurukul Pre-School Enrollment System
Published: March 5, 2025

CVE-2025-24494

7.2
    UNKNOWN
Published: March 5, 2025

CVE-2024-31525

7.2
    Peppermint Ticket Management
Published: March 5, 2025

CVE-2025-20206

7.1
    Cisco Secure Client for Windows
Published: March 5, 2025

CVE-2025-2003

7.1
    Devolutions Server
Published: March 5, 2025

CVE-2024-0141

6.8
    NVIDIA Hopper HGX
Published: March 5, 2025

CVE-2025-21092

6.5
    GMOD Apollo
Published: March 5, 2025

CVE-2025-1921

6.5
    Google Chrome
Published: March 5, 2025

CVE-2024-13778

6.5
    Hero Mega Menu - Responsive WordPress Menu Plugin
Published: March 5, 2025

CVE-2024-13780

6.5
    Hero Mega Menu - Responsive WordPress Menu Plugin
Published: March 5, 2025

CVE-2024-13809

6.5
    Hero Slider - WordPress Slider Plugin
Published: March 5, 2025

CVE-2024-13815

6.5
    Listingo theme for WordPress
Published: March 5, 2025

CVE-2025-0954

6.5
    WP Online Contract plugin for WordPress
Published: March 5, 2025

CVE-2025-25634

6.5
    Tenda AC15
Published: March 5, 2025

CVE-2024-13350

6.4
    SearchIQ - The Search Solution plugin for WordPress
Published: March 5, 2025

CVE-2024-13866

6.4
    Simple Notification plugin for WordPress
Published: March 5, 2025

CVE-2025-1008

6.4
    Recently Purchased Products For Woo plugin for WordPress
Published: March 5, 2025

CVE-2024-11731

6.4
    Master Slider – Responsive Touch Slider plugin for WordPress
Published: March 5, 2025

CVE-2024-12815

6.4
    Point Maker plugin for WordPress
Published: March 5, 2025

CVE-2024-13757

6.4
    Master Slider - Responsive Touch Slider plugin for WordPress
Published: March 5, 2025

CVE-2024-5667

6.4
    WordPress
Published: March 5, 2025

CVE-2025-1435

6.3
    bbPress plugin for WordPress
Published: March 5, 2025

CVE-2025-27637

6.1
    Vasion Print (formerly PrinterLogic)
Published: March 5, 2025

CVE-2025-27653

6.1
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2025-27654

6.1
    Vasion Print (formerly PrinterLogic)
Published: March 5, 2025

CVE-2025-27676

6.1
    Vasion Print (formerly PrinterLogic)
Published: March 5, 2025

CVE-2025-27679

6.1
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2024-13827

6.1
    Razorpay Subscription Button Elementor Plugin
Published: March 5, 2025

CVE-2024-13779

6.1
    Hero Mega Menu - Responsive WordPress Menu Plugin
Published: March 5, 2025

CVE-2024-13839

6.1
    Staff Directory Plugin: Company Directory plugin for WordPress
Published: March 5, 2025

CVE-2025-27412

6.1
    REDAXO
Published: March 5, 2025

CVE-2025-22493

5.6
    Foreseer Reporting Software
Published: March 5, 2025

CVE-2025-27660

5.4
    Vasion Print (formerly PrinterLogic) Virtual Appliance Host
Published: March 5, 2025

CVE-2024-12650

5.4
    UNKNOWN
Published: March 5, 2025

CVE-2025-27411

5.4
    REDAXO
Published: March 5, 2025

CVE-2024-48246

5.4
    Vehicle Management System
Published: March 5, 2025

CVE-2025-27624

5.4
    Jenkins
Published: March 5, 2025

CVE-2025-20002

5.3
    GMOD Apollo
Published: March 5, 2025

CVE-2024-8682

5.3
    JNews - WordPress Newspaper Magazine Blog AMP Theme
Published: March 5, 2025

CVE-2024-11153

5.3
    Content Control – The Ultimate Content Restriction Plugin! for WordPress
Published: March 5, 2025

CVE-2024-13423

5.3
    WordPress Sparkling theme
Published: March 5, 2025

CVE-2025-21095

4.9
    UNKNOWN
Published: March 5, 2025

CVE-2025-23416

4.9
    UNKNOWN
Published: March 5, 2025

CVE-2025-24521

4.9
    UNKNOWN
Published: March 5, 2025

CVE-2025-20208

4.6
    Cisco TelePresence Management Suite (TMS)
Published: March 5, 2025

CVE-2025-1917

4.3
    Google Chrome on Android
Published: March 5, 2025

CVE-2025-1922

4.3
    Google Chrome on Android
Published: March 5, 2025

CVE-2025-1923

4.3
    Google Chrome
Published: March 5, 2025

CVE-2025-0990

4.3
    I Am Gloria plugin for WordPress
Published: March 5, 2025

CVE-2024-13747

4.3
    WooMail - WooCommerce Email Customizer plugin for WordPress
Published: March 5, 2025

CVE-2024-13810

4.3
    Zass - WooCommerce Theme for Handmade Artists and Artisans theme for WordPress
Published: March 5, 2025

CVE-2024-13811

4.3
    Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme theme for WordPress
Published: March 5, 2025

CVE-2025-1463

4.3
    Spreadsheet Integration plugin for WordPress
Published: March 5, 2025

CVE-2025-27622

4.3
    Jenkins
Published: March 5, 2025

CVE-2025-27623

4.3
    Jenkins
Published: March 5, 2025

CVE-2025-27625

4.3
    Jenkins
Published: March 5, 2025

CVE-2025-1967

3.5
    Blood Bank Management System
Published: March 5, 2025

CVE-2025-22212

2.7
    ConvertForms for Joomla
Published: March 5, 2025

CVE-2024-11035

2.5
    Carbon Black Cloud Windows Sensor
Published: March 5, 2025

CVE-2024-12799

None
    OpenText Identity Manager Advanced Edition
Published: March 5, 2025

CVE-2025-1714

None
    Perforce Gliffy
Published: March 5, 2025

CVE-2025-27497

None
    OpenDJ
Published: March 5, 2025

CVE-2025-27515

None
    Laravel
Published: March 5, 2025

CVE-2025-27517

None
    Volt
Published: March 5, 2025

CVE-2025-27516

None
    Jinja
Published: March 5, 2025
Click here to see more Vulnerabilities