Tag: 2025-03-13

6 Attack Reports | 93 Vulnerabilities

Attack reports

Phishing campaign impersonates Booking.com, delivers a suite of credential-stealing malware

A phishing campaign targeting organizations in the hospitality industry has been identified, impersonating Booking.com and using the ClickFix social engineering technique to deliver multiple credential-stealing malware. The campaign, tracked as Storm-1865, targets individuals likely to work with Bo…
xworm
phishing
social engineering
lumma stealer
asyncrat
danabot
venomrat
clickfix
netsupport rat
booking.com
2025-03-13
credential-stealing
2025-04-13
Published: April 13, 2025
Downloadable IOCs: 0

Affiliate Fraud at Scale: AI, Black Hat SEO, Social Media, and Brand Abuse in iGaming and VPNs

A large-scale affiliate marketing campaign has been uncovered, utilizing AI-generated content, automation, fake social media accounts, and Black Hat SEO to manipulate search rankings and drive traffic to iGaming and VPN promotions. The operation involves thousands of subdomains, redirection chains,…
black hat seo
vpn
ai-generated content
social media manipulation
2025-03-13
subdomain generation
igaming
affiliate fraud
redirection chains
Published: March 13, 2025
Downloadable IOCs: 14

Head Mare and Twelve: Joint attacks on Russian entities

Head Mare and Twelve, two hacktivist groups, have launched joint attacks on Russian companies. Head Mare has expanded its toolkit, now using tools previously associated only with Twelve, such as the CobInt backdoor. The attackers gained initial access through phishing emails and compromised contrac…
ransomware
lockbit
hacktivism
CVE-2021-26855
CVE-2023-38831
babuk
lockbit 3.0
cobint
infrastructure sharing
2025-03-13
phantomjitter
Published: March 13, 2025
Downloadable IOCs: 0

Investigating Scam Crypto Investment Platforms Using Pyramid Schemes to Defraud Victims

A campaign distributing thousands of fraudulent cryptocurrency investment platforms via websites and mobile applications has been uncovered. The operation impersonates well-known brands and organizations, luring victims with unrealistic promises of high returns. The consistent design of the platfor…
impersonation
cryptocurrency
telegram
2025-03-13
mobile applications
investment scam
pyramid scheme
Published: March 13, 2025
Downloadable IOCs: 36

File Hashes Analysis with Power BI from Data Stored in DShield SIEM

This analysis showcases the use of Power BI to examine file hash data from a DShield SIEM over a 60-day period. The process involved exporting data from Elastic Discover, importing it into Power BI, and creating visualizations for analysis. Key findings include the identification of an IP address (…
xorddos
redtail
siem
power bi
2025-03-13
dshield
visualization
ircbot
file hashes
data analysis
Published: March 13, 2025
Downloadable IOCs: 0

Unmasking GrassCall Campaign: The Hackers Behind Job Recruitment Cyber Scams

The GrassCall malware campaign, orchestrated by the Russian-speaking cybercriminal group 'Crazy Evil,' targets job seekers in the cryptocurrency and Web3 sectors. The attackers create fake companies and job postings, luring victims into downloading malicious software disguised as a video conferenci…
social engineering
rhadamanthys
cryptocurrency
atomic macos stealer
remote access trojan
web3
grasscall
2025-03-13
job recruitment scam
russian-speaking cybercriminals
Published: March 13, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-2263

9.8
    Sante
  • Pacs Server
    Openssl
Published: March 13, 2025

CVE-2025-25175

7.8
    Siemens
  • Simcenter Femap
Published: March 13, 2025

CVE-2024-12858

7.8
    Delta Electronics
  • Cncsoft-G2
Published: March 13, 2025

CVE-2025-1427

7.8
    Autodesk
  • Autocad
Published: March 13, 2025

CVE-2025-1428

7.8
    Autodesk
  • Autocad
Published: March 13, 2025

CVE-2025-1429

7.8
    Autodesk
  • Autocad
Published: March 13, 2025

CVE-2025-1430

7.8
    Autodesk
  • Autocad
Published: March 13, 2025

CVE-2025-1431

7.8
    Autodesk
  • Autocad
Published: March 13, 2025

CVE-2025-1432

7.8
    Autodesk
  • Autocad
Published: March 13, 2025

CVE-2025-1433

7.8
    Autodesk
  • Autocad
Published: March 13, 2025

CVE-2025-1649

7.8
    Autodesk
  • Autocad
Published: March 13, 2025

CVE-2025-1650

7.8
    Autodesk
  • Autocad
Published: March 13, 2025

CVE-2025-1651

7.8
    Autodesk
  • Autocad
Published: March 13, 2025

CVE-2025-1652

7.8
    Autodesk
  • Autocad
Published: March 13, 2025

CVE-2025-2265

7.8
    Sante
  • Sante Pacs Server
Published: March 13, 2025

CVE-2025-2271

7.7
    Issuetrak
  • Issuetrak
Published: March 13, 2025

CVE-2025-2229

7.7
    Generic
  • Application
Published: March 13, 2025

CVE-2025-2230

7.7
    Microsoft
  • Windows
Published: March 13, 2025

CVE-2025-2106

7.5
    Arielbrailovsky
  • Viralad
    Wordpress
Published: March 13, 2025

CVE-2025-2107

7.5
    Arielbrailovsky
  • Viralad
Published: March 13, 2025

CVE-2024-10942

7.5
    Wordpress
  • All-In-One Wp Migration And Backup
Published: March 13, 2025

CVE-2025-2264

7.5
    Sante
  • Pacs Server
Published: March 13, 2025

CVE-2025-2284

7.5
    Sante
  • Pacs Server
Published: March 13, 2025

CVE-2025-1119

7.3
    Wordpress
  • Appointment Booking Calendar
Published: March 13, 2025

CVE-2025-1561

7.2
    Wordpress
  • Apppresser Mobile App Framework
Published: March 13, 2025

CVE-2025-24053

7.2
    Microsoft
  • Dataverse
Published: March 13, 2025

CVE-2024-13884

7.1
    Wordpress
  • Plugin
Published: March 13, 2025

CVE-2024-13885

7.1
    Wordpress
  • Plugin
    Wp-E-Customers
Published: March 13, 2025

CVE-2024-13891

7.1
    Wordpress
  • Schedule
Published: March 13, 2025

CVE-2025-1401

7.1
    Wordpress
  • Wp Click Info
Published: March 13, 2025

CVE-2025-1436

7.1
    Wordpress
  • Limit Bio
Published: March 13, 2025

CVE-2025-1486

7.1
    Wordpress
  • Wowpth
Published: March 13, 2025

CVE-2025-1487

7.1
    Wordpress
  • Plugin
Published: March 13, 2025

CVE-2024-13054

6.5
    Gitlab
  • Gitlab
Published: March 13, 2025

CVE-2025-1257

6.5
    Gitlab
  • Gitlab
Published: March 13, 2025

CVE-2025-1767

6.5
    Kubernetes
  • Kubernetes
Published: March 13, 2025

CVE-2025-1559

6.4
    Wordpress
  • Cc-Img-Shortcode
Published: March 13, 2025

CVE-2025-1503

6.4
    Wordpress
  • Wp Recipe Maker
Published: March 13, 2025

CVE-2024-9042

5.9
    Microsoft
  • Windows
Published: March 13, 2025

CVE-2025-29773

5.8
    Froxlor
  • Froxlor
Published: March 13, 2025

CVE-2025-1785

5.4
    Wordpress
  • Download Manager
Published: March 13, 2025

CVE-2024-13887

5.3
    Wordpress
  • Business Directory Plugin
Published: March 13, 2025

CVE-2025-2250

4.9
    Wordpress
  • Plugin
Published: March 13, 2025

CVE-2024-12380

4.4
    Gitlab
  • Gitlab
Published: March 13, 2025

CVE-2025-29768

4.4
    Vim
  • Vim
Published: March 13, 2025

CVE-2024-13703

4.3
    Vcita
  • Plugin
Published: March 13, 2025

CVE-2025-2104

4.3
    Wordpress
  • Pagelayer
Published: March 13, 2025

CVE-2020-36843

4.3
    Ed25519-Java
  • Ed25519-Java
Published: March 13, 2025

CVE-2025-0652

4.3
    Gitlab
  • Gitlab
Published: March 13, 2025

CVE-2025-21104

4.3
    Dell
  • Networker
Published: March 13, 2025

CVE-2024-30143

4.3
    Hcl
  • Appscan Traffic Recorder
Published: March 13, 2025

CVE-2024-8402

3.7
    Gitlab
  • Gitlab
Published: March 13, 2025

CVE-2025-27496

3.3
    Snowflake
  • Jdbc Driver
Published: March 13, 2025

CVE-2024-7296

2.7
    Gitlab
  • Gitlab Ee
Published: March 13, 2025

CVE-2025-2275

None
    *
Published: March 13, 2025

CVE-2025-29994

None
    *
  • Cap
Published: March 13, 2025

CVE-2025-29995

None
    *
  • Cap Back Office Application
Published: March 13, 2025

CVE-2025-29996

None
    *
  • Cap Back Office Application
Published: March 13, 2025

CVE-2025-29997

None
    Cap
  • Back Office Application
Published: March 13, 2025

CVE-2025-29998

None
    Cap
  • Back Office Application
Published: March 13, 2025

CVE-2025-1635

None
    Devolutions
  • Remote Desktop Manager
Published: March 13, 2025

CVE-2025-1636

None
    Devolutions
  • Remote Desktop Manager
Published: March 13, 2025

CVE-2025-2277

None
    Devolutions
  • Server
Published: March 13, 2025

CVE-2025-2278

None
    Devolutions
  • Server
Published: March 13, 2025

CVE-2025-2280

None
    Devolutions
  • Devolutions Server
Published: March 13, 2025

CVE-2024-22880

None
    Zadarma
  • Zadarma Extension
Published: March 13, 2025

CVE-2024-28803

None
    Italtel
  • I-Mcs
Published: March 13, 2025

CVE-2024-57348

None
    Pecanproject
  • Pecan
Published: March 13, 2025

CVE-2025-29357

None
    Tenda
  • Rx3
Published: March 13, 2025

CVE-2025-29358

None
    Tenda
  • Rx3
Published: March 13, 2025

CVE-2025-29359

None
    Tenda
  • Rx3
Published: March 13, 2025

CVE-2025-29360

None
    Tenda
  • Rx3
Published: March 13, 2025

CVE-2025-29361

None
    Tenda
  • Rx3
Published: March 13, 2025

CVE-2025-29362

None
    Tenda
  • Rx3
Published: March 13, 2025

CVE-2025-29363

None
    Tenda
  • Rx3
Published: March 13, 2025

CVE-2024-55198

None
    Celk Sistemas
  • Celk Saude
Published: March 13, 2025

CVE-2025-25625

None
    Fsinc
  • S3150-8t2f Switch
Published: March 13, 2025

CVE-2024-57062

None
    Soundcloud
  • Ios Application
Published: March 13, 2025

CVE-2025-28010

None
    Modx
  • Modx
Published: March 13, 2025

CVE-2025-28015

None
    Phpgurukul
  • User Registration And Login And User Management System
Published: March 13, 2025

CVE-2024-53406

None
    Espresiff
  • Esp Idf
Published: March 13, 2025

CVE-2025-24974

None
    Dataease
  • Dataease
Published: March 13, 2025

CVE-2025-27103

None
    Dataease
  • Dataease
Published: March 13, 2025

CVE-2025-27107

None
    Minecraft
  • Integrated Scripting
Published: March 13, 2025

CVE-2025-27138

None
    Dataease
  • Dataease
Published: March 13, 2025

CVE-2025-28011

None
    Phpgurukul
  • User Registration And Login
Published: March 13, 2025

CVE-2025-2079

None
    Optigo Networks
  • Visual Bacnet Capture Tool
  • Visual Networks Capture Tool
Published: March 13, 2025

CVE-2025-2080

None
    Optigo Networks
  • Visual Bacnet Capture Tool
  • Visual Networks Capture Tool
Published: March 13, 2025

CVE-2025-2081

None
    Optigo
  • Visual Bacnet Capture Tool
  • Visual Networks Capture Tool
Published: March 13, 2025

CVE-2025-25363

None
    The Plugin People
  • Enterprise Mail Handler
Published: March 13, 2025

CVE-2025-25598

None
    Inova Logic
  • Customer Monitor
Published: March 13, 2025

CVE-2024-55060

None
    Rafed
  • Cms Website
Published: March 13, 2025

CVE-2025-1266

None
Published: March 13, 2025
Click here to see more Vulnerabilities