Tag: 2025-03-10

4 Attack Reports | 83 Vulnerabilities

Attack reports

Malicious Packages Identified in the Wild: Insights and Trends from November 2024 Onward

FortiGuard Labs has analyzed malicious software packages detected from November 2024 to March 2025, revealing various attack techniques used to exploit system vulnerabilities. Key findings include 1,082 packages with low file counts, 1,052 packages with suspicious install scripts, and 1,043 package…
obfuscation
python
typosquatting
node.js
backdoors
data exfiltration
vulnerability exploitation
2025-03-10
install scripts
software packages
Published: March 10, 2025
Downloadable IOCs: 11

Blind Eagle: …And Justice for All

Check Point Research uncovered ongoing campaigns by Blind Eagle targeting Colombian institutions since November 2024. The group exploits a variant of CVE-2024-43451, using malicious .url files to deliver malware. Their attack chain includes HeartCrypt-packed executables, a .NET RAT, and Remcos RAT …
phishing
remcos
purecrypter
remcos rat
CVE-2024-43451
heartcrypt
2025-03-10
Published: March 10, 2025
Downloadable IOCs: 16

Highway Robbery 2.0: How Attackers Are Exploiting Toll Systems in Phishing Scams

A massive SMS phishing campaign targeting U.S. drivers exploits various toll systems, including E-ZPass, SunPass, and TxTag. The scam uses fake payment alerts sent via iMessage and SMS from foreign numbers to lure victims to fraudulent websites. Analysis reveals a pattern in domain names and infras…
infrastructure analysis
domain spoofing
sms phishing
sunpass
2025-03-10
nginx
toll systems
txtag
imessage
chinese asns
e-zpass
Published: March 10, 2025
Downloadable IOCs: 0

SideWinder targets the maritime and nuclear sectors with an updated toolset

The SideWinder APT group intensified its activities in the second half of 2024, targeting maritime infrastructures, logistics companies, and nuclear sectors across Asia, the Middle East, and Africa. The group updated its toolset, including improvements to its RTF exploit, JavaScript loader, and Bac…
apt
javascript
africa
CVE-2017-11882
maritime
spear-phishing
south asia
stealerbot
rtf exploit
nuclear
2025-03-10
downloader module
backdoor loader
module installer
Published: March 10, 2025
Linked vulnerabilities : CVE-2017-11882
Downloadable IOCs: 38
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-26936

10.0
    Fresh Framework
Published: March 10, 2025

CVE-2025-1945

9.8
    Mmaitre314
  • Picklescan
Published: March 10, 2025

CVE-2025-1497

9.8
    Mljar
  • Plotai
Published: March 10, 2025

CVE-2025-25940

9.8
    VisiCut
Published: March 10, 2025

CVE-2025-25977

9.8
    Canvg
  • Canvg
Published: March 10, 2025

CVE-2025-24813

9.8
    Apache
  • Tomcat
    Debian
Published: March 10, 2025

CVE-2025-25306

9.3
    Misskey
Published: March 10, 2025

CVE-2025-26916

9.0
    EPC Massive Dynamic
Published: March 10, 2025

CVE-2024-11638

8.8
    Gtbabel WordPress plugin
Published: March 10, 2025

CVE-2025-25614

8.8
    Unifiedtransform
Published: March 10, 2025

CVE-2025-1920

8.8
    Google
  • Chrome
Published: March 10, 2025

CVE-2025-2135

8.8
    Google
  • Chrome
Published: March 10, 2025

CVE-2025-2136

8.8
    Google
  • Chrome
Published: March 10, 2025

CVE-2025-2137

8.8
    Google
  • Chrome
Published: March 10, 2025

CVE-2025-25907

8.8
    tianti
Published: March 10, 2025

CVE-2024-41724

8.7
    Gallagher Command Centre SALTO integration
Published: March 10, 2025

CVE-2025-27616

8.5
    Vela
Published: March 10, 2025

CVE-2025-27925

8.5
    Nintex Automation
Published: March 10, 2025

CVE-2024-56191

8.4
    UNKNOWN
Published: March 10, 2025

CVE-2025-27256

8.3
    GE Vernova Enervista UR Setup application
Published: March 10, 2025

CVE-2025-27615

8.2
    umatiGateway
Published: March 10, 2025

CVE-2025-27254

8.0
    GE Vernova EnerVista UR Setup
Published: March 10, 2025

CVE-2025-27255

8.0
    GE Vernova EnerVista UR Setup
Published: March 10, 2025

CVE-2024-13918

8.0
    Laravel
  • Framework
Published: March 10, 2025

CVE-2024-13919

8.0
    Laravel
  • Framework
Published: March 10, 2025

CVE-2025-27910

8.0
    tianti
Published: March 10, 2025

CVE-2022-43454

7.8
    Apple
  • Ipados
  • Iphone Os
  • Macos
  • Tvos
  • Watchos
Published: March 10, 2025

CVE-2024-56192

7.8
    UNKNOWN
Published: March 10, 2025

CVE-2025-26933

7.5
    WC Place Order Without Payment
Published: March 10, 2025

CVE-2025-25382

7.5
    Information Kerala Mission SANCHAYA
Published: March 10, 2025

CVE-2024-44227

7.5
    Apple
  • Ipados
  • Iphone Os
  • Macos
Published: March 10, 2025

CVE-2024-54546

7.5
    Apple
  • Macos
Published: March 10, 2025

CVE-2025-27913

7.5
    Passbolt API
Published: March 10, 2025

CVE-2025-27610

7.5
    Rack gem
Published: March 10, 2025

CVE-2024-12604

7.3
    Tapandsign
  • Tap\&Sign
Published: March 10, 2025

CVE-2024-43107

7.2
    Gallagher Milestone Integration Plugin (MIP)
Published: March 10, 2025

CVE-2025-26910

7.1
    WPBookit
Published: March 10, 2025

CVE-2025-26696

7.0
    Mozilla
  • Thunderbird
Published: March 10, 2025

CVE-2024-56187

6.6
    UNKNOWN
Published: March 10, 2025

CVE-2025-1944

6.5
    Mmaitre314
  • Picklescan
Published: March 10, 2025

CVE-2025-1296

6.5
    Nomad Community Edition
    Nomad Enterprise
Published: March 10, 2025

CVE-2024-54467

6.5
    Apple
  • Safari
  • Ipados
  • Iphone Os