Tag: 2025-03-25

9 Attack Reports | 145 Vulnerabilities

Attack reports

A Practical Guide to Uncovering Malicious Infrastructure With Hunt.io

This guide demonstrates how to use Hunt.io to investigate and track malicious infrastructure. Starting with a single suspicious IP address, the process involves analyzing hosting providers, domain information, open ports, HTTP responses, and TLS certificates. The investigation reveals connections t…
latrodectus
malicious infrastructure
osint
tls certificates
threat hunting
2025-03-25
latrodectus malware
sql queries
hunt.io
network scanning
cryptocurrency fraud
Published: March 25, 2025
Downloadable IOCs: 0

Operation ForumTroll exploits zero-days in Google Chrome

In March 2025, a sophisticated malware campaign exploited a zero-day vulnerability in Google Chrome to infect targets. The attack, dubbed Operation ForumTroll, used personalized phishing emails with short-lived links to deliver malware. Kaspersky detected the exploit, reported it to Google, and an …
apt
phishing
zero-day
google chrome
2025-03-25
trojan.win64.convagent.gen
sandbox escape
trojan.win64.agent
CVE-2025-2783
Published: March 25, 2025
Downloadable IOCs: 0

CVE-2025-26633: How Water Gamayun Weaponizes MUIPath using MSC EvilTwin

Trend Research uncovered a campaign by the Russian threat actor Water Gamayun that exploits a zero-day vulnerability in the Microsoft Management Console framework to execute malicious code, named MSC EvilTwin (CVE-2025-26633).
backdoor
windows
infostealer
zero-day
github
trojanspy
sha256
detection
CVE-2025-26633
2025-03-25
disease vector
msc eviltwin
filename
water gamayun
files
related
domain
description
encrypthub
Published: March 25, 2025
Linked vulnerabilities : CVE-2025-26633 (CVSS 7.0)
Downloadable IOCs: 58

New Android Malware Campaigns Evading Detection Using Cross-Platform Framework .NET MAUI

Cybercriminals are exploiting .NET MAUI, a cross-platform development framework, to create Android malware that evades detection. These threats disguise themselves as legitimate apps, targeting users to steal sensitive information. The malware campaigns use techniques such as hiding code in blob fi…
android
2025-03-25
net maui
fake apps
Published: March 25, 2025
Downloadable IOCs: 13

GorillaBot: Technical Analysis and Code Similarities with Mirai

GorillaBot is a newly discovered Mirai-based botnet that has launched over 300,000 attacks across more than 100 countries, targeting various industries including telecommunications, finance, and education. It reuses Mirai's core logic while adding custom encryption and evasion techniques. The malwa…
evasion
encryption
botnet
mirai
c2 communication
anti-debugging
2025-03-25
xtea
sha-256
gorillabot
Published: March 25, 2025
Downloadable IOCs: 3

YouTube Creators Under Siege Again: Clickflix Technique Fuels Malware Attacks

Cybercriminals are targeting YouTube creators with a sophisticated malware campaign using the Clickflix technique. Attackers impersonate popular brands and offer fake collaboration opportunities to lure victims. The campaign employs spearphishing emails with malicious attachments and links to fake …
social engineering
spearphishing
powershell
cryptocurrency
lumma stealer
credential theft
youtube
2025-03-25
clickflix
Published: March 25, 2025
Downloadable IOCs: 5

Weaver Ant, the Web Shell Whisperer: Tracking a China-Nexus Cyber Operation

Sygnia uncovered a sophisticated China-nexus threat actor, Weaver Ant, targeting a major Asian telecom company. The group employed web shells and tunneling techniques for persistence and lateral movement, maintaining access for over four years. They utilized encrypted China Chopper and custom 'INMe…
espionage
evasion
persistence
lateral movement
china chopper
china-nexus
telecom
2025-03-25
web shells
tunneling
inmemory web shell
Published: March 25, 2025
Downloadable IOCs: 1

SnakeKeylogger: Multistage Info Stealer Malware Analysis & Prevention

SnakeKeylogger is a highly active credential-stealing malware targeting individuals and businesses. It employs a multi-stage infection chain, starting with malicious spam emails containing .img files. The malware uses sophisticated techniques like process hollowing and obfuscation to evade detectio…
obfuscation
credential-theft
process-hollowing
multi-stage
snakekeylogger
info-stealer
2025-03-25
spam-email
apache-server
Published: March 25, 2025
Downloadable IOCs: 2

New Phishing Campaign Uses Browser-in-the-Browser Attacks to Target Video Gamers/Counter-Strike 2 Players

A sophisticated phishing campaign targeting Counter-Strike 2 players has been uncovered, employing browser-in-the-browser (BitB) attacks. The campaign aims to steal Steam accounts by creating convincing fake browser pop-ups that mimic legitimate login pages. The threat actors are abusing the identi…
phishing
credential theft
gaming
2025-03-25
steam
counter-strike 2
browser-in-the-browser
esports
Published: March 25, 2025
Downloadable IOCs: 8
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-1974

9.8
    Kubernetes
  • Kubernetes
    Nginx
Published: March 25, 2025

CVE-2024-42533

9.8
    Convivance
  • Standvoice
Published: March 25, 2025

CVE-2024-48818

9.8
    Iit Bombay
  • Bodhitree
Published: March 25, 2025

CVE-2024-55028

9.8
    Nasa
  • Fprime
Published: March 25, 2025

CVE-2024-55030

9.8
    Nasa
  • Fprime
Published: March 25, 2025

CVE-2025-25373

9.8
    Nasa
  • Cfs
Published: March 25, 2025

CVE-2025-27831

9.8
    Artifex
  • Ghostscript
Published: March 25, 2025

CVE-2025-27832

9.8
    Artifex
  • Ghostscript
Published: March 25, 2025

CVE-2025-27836

9.8
    Artifex
  • Ghostscript
Published: March 25, 2025

CVE-2025-27837

9.8
    Artifex
  • Ghostscript
Published: March 25, 2025

CVE-2025-30091

9.4
    Tiny Moxiemanager
  • Tiny Moxiemanager
Published: March 25, 2025

CVE-2025-30216

9.4
    Cryptologic
  • Core Flight System
Published: March 25, 2025

CVE-2025-28904

9.3
    Shamalli
  • Web Directory Free
Published: March 25, 2025

CVE-2024-45480

9.2
    Br
  • Aprol
Published: March 25, 2025

CVE-2025-1097

8.8
    Kubernetes
  • Ingress-Nginx
Published: March 25, 2025

CVE-2025-1098

8.8
    Kubernetes
  • Ingress-Nginx
Published: March 25, 2025

CVE-2025-24514

8.8
    Nginx
  • Ingress-Nginx
Published: March 25, 2025

CVE-2025-2319

8.8
    Wordpress
  • Ez Sql Reports Shortcode Widget
  • Db Backup
Published: March 25, 2025

CVE-2025-29635

8.8
    D-Link
  • Dir-823x
Published: March 25, 2025

CVE-2025-2725

8.7
    H3c
  • Magic Nx15
  • Magic Nx30 Pro
  • Magic Nx400
  • Magic R3010
  • Magic Be18000
Published: March 25, 2025

CVE-2025-2726

8.7
    H3c
  • Magic Nx15
  • Magic Nx30 Pro
  • Magic Nx400
  • Magic R3010
  • Magic Be18000
Published: March 25, 2025

CVE-2025-2727

8.7
    H3c
  • Magic Nx30 Pro
Published: March 25, 2025

CVE-2025-2728

8.7
    H3c
  • Magic Nx30 Pro
  • Magic Nx400
Published: March 25, 2025

CVE-2025-2729

8.7
    H3c
  • Magic Nx15
  • Magic Nx30 Pro
  • Magic Nx400
  • Magic R3010
  • Magic Be18000
Published: March 25, 2025

CVE-2025-2730

8.7
    H3c
  • Magic Nx15
  • Magic Nx30 Pro
  • Magic Nx400
  • Magic R3010
  • Magic Be18000
Published: March 25, 2025

CVE-2025-2731

8.7
    H3c
  • Magic Nx15
  • Magic Nx30 Pro
  • Magic Nx400
  • Magic R3010
  • Magic Be18000
Published: March 25, 2025

CVE-2025-2732

8.7
    H3c
  • Magic Nx15
  • Magic Nx30 Pro
  • Magic Nx400
  • Magic R3010
  • Magic Be18000
Published: March 25, 2025

CVE-2024-8313

8.7
    Abb
  • B&R Aprol
Published: March 25, 2025

CVE-2024-12169

8.7
    Hitachi
  • Rtu500
Published: March 25, 2025

CVE-2025-1445

8.7
    Hitachi Energy
  • Rtu500
Published: March 25, 2025

CVE-2024-13617

8.6
    Aoa-Downloadable
  • Aoa-Downloadable Plugin
Published: March 25, 2025

CVE-2024-10209

8.5
    Abb
  • B&R Aprol
Published: March 25, 2025

CVE-2024-45481

8.5
    B&R
  • Aprol
Published: March 25, 2025

CVE-2024-45482

8.5
    Abb
  • Br Aprol
Published: March 25, 2025

CVE-2024-10210

8.4
    Br
  • Aprol
Published: March 25, 2025

CVE-2024-53679

8.4
    Apache
  • Vcl
Published: March 25, 2025

CVE-2025-27147

8.2
    Glpi-Project
  • Glpi Inventory Plugin
Published: March 25, 2025

CVE-2025-30214

8.0
    Frappe
  • Frappe
Published: March 25, 2025

CVE-2025-22230

7.8
    Vmware
  • Vmware Tools
Published: March 25, 2025

CVE-2025-2530

7.8
    Luxion
  • Keyshot
Published: March 25, 2025

CVE-2025-2531

7.8
    Luxion
  • Keyshot
Published: March 25, 2025

CVE-2025-2532

7.8
    Luxion
  • Keyshot
Published: March 25, 2025

CVE-2025-27830

7.8
    Artifex
  • Ghostscript
Published: March 25, 2025

CVE-2025-27833

7.8
    Artifex
  • Ghostscript
Published: March 25, 2025

CVE-2025-27834

7.8
    Artifex
  • Ghostscript
Published: March 25, 2025

CVE-2025-27835

7.8
    Artifex
  • Ghostscript
Published: March 25, 2025

CVE-2024-44903

7.5
    Sirsidynix
  • Horizon Information Portal
Published: March 25, 2025

CVE-2025-30567

7.5
    Wp01ru
  • Wp01
Published: March 25, 2025

CVE-2025-30118

7.5
    Audi
  • Universal Traffic Recorder
Published: March 25, 2025

CVE-2025-25371

7.5
    Nasa
  • Core Flight System
Published: March 25, 2025

CVE-2025-25372

7.5
    Nasa
  • Core Flight System
Published: March 25, 2025

CVE-2025-25374

7.5
    Nasa
  • Core Flight System
Published: March 25, 2025

CVE-2024-58104

7.3
    Trendmicro
  • Apex One
Published: March 25, 2025

CVE-2024-58105

7.3
    Trendmicro
  • Apex One
Published: March 25, 2025

CVE-2024-45484

7.2
    Br
  • Aprol
Published: March 25, 2025

CVE-2024-13618

7.2
    Wordpress
  • Aoa-Downloadable
Published: March 25, 2025

CVE-2024-13690

7.2
    Wordpress
  • Wp Church Donation Plugin
Published: March 25, 2025

CVE-2024-13863

7.1
    Stylish Google Sheet Reader
  • Stylish Google Sheet Reader
Published: March 25, 2025

CVE-2024-45483

7.0
    Abb
  • B%26r Aprol
Published: March 25, 2025

CVE-2024-10206

6.9
    Abb
  • Br Aprol
Published: March 25, 2025

CVE-2025-2734

6.9
    Phpgurukul
  • Old Age Home Management System
Published: March 25, 2025

CVE-2025-2735

6.9
    Phpgurukul
  • Old Age Home Management System
Published: March 25, 2025

CVE-2025-2736

6.9
    Phpgurukul
  • Old Age Home Management System
Published: March 25, 2025

CVE-2025-2737

6.9
    Phpgurukul
  • Old Age Home Management System
Published: March 25, 2025

CVE-2025-2738

6.9
    Phpgurukul
  • Old Age Home Management System
Published: March 25, 2025

CVE-2025-2739

6.9
    Phpgurukul
  • Old Age Home Management System
Published: March 25, 2025

CVE-2025-2740

6.9
    Phpgurukul
  • Old Age Home Management System
Published: March 25, 2025

CVE-2024-11499

6.9
    Hitachi Energy
  • Rtu500
Published: March 25, 2025

CVE-2024-8315

6.8
    Abb
  • B&R Aprol
Published: March 25, 2025

CVE-2025-30212

6.6
    Frappe
  • Frappe Framework
Published: March 25, 2025

CVE-2025-27631

6.5
    Hitachi
  • Trmtracker
Published: March 25, 2025

CVE-2025-26742

6.5
    Ghozylab
  • Gallery For Social Photo
Published: March 25, 2025

CVE-2025-0845

6.4
    Design Themes
  • Core Features Plugin
Published: March 25, 2025

CVE-2024-12623

6.4
    Wordpress
  • Dicom Support Plugin
Published: March 25, 2025

CVE-2024-13731

6.4
    Wordpress
  • Alert Box Block
Published: March 25, 2025

CVE-2025-2542

6.4
    Wordpress
  • Your Simple Svg Support
Published: March 25, 2025

CVE-2025-30213

6.3
    Frappe
  • Frappe
Published: March 25, 2025

CVE-2024-10565

6.1
    10web
  • Slider
Published: March 25, 2025

CVE-2024-10566

6.1
    10web
  • Slider
Published: March 25, 2025

CVE-2024-10679

6.1
    Wordpress
  • Quiz And Survey Master
Published: March 25, 2025

CVE-2024-10703

6.1
    Wordpress
  • Registrations For Events Calendar
Published: March 25, 2025

CVE-2024-11272

6.1
    Pirateforms
  • Contact Form Smtp Plugin
Published: March 25, 2025

CVE-2024-11273

6.1
    Pirateforms
  • Contact Form Smtp
Published: March 25, 2025

CVE-2024-11503

6.1
    Wordpress
  • Wp Tabs
Published: March 25, 2025

CVE-2024-12682

6.1
    Wordpress
  • Smart Maintenance Mode
Published: March 25, 2025

CVE-2025-1798

6.1
    Wordpress
  • Wordpress
Published: March 25, 2025

CVE-2025-2635

6.1
    Wordpress
  • Plugin
  • Digital License Manager
Published: March 25, 2025

CVE-2025-27632

6.1
    Hitachi
  • Trmtracker
Published: March 25, 2025

CVE-2025-27633

6.1
    Hitachi
  • Trmtracker
Published: March 25, 2025

CVE-2025-30219

6.1
    Rabbitmq
  • Rabbitmq
    Pivotal
Published: March 25, 2025

CVE-2024-10105

5.9
    Wordpress
  • Job Postings
Published: March 25, 2025

CVE-2024-10472

5.9
    Wpstylish
  • Stylish Price List
Published: March 25, 2025

CVE-2024-10037

5.9
    Hitachi Energy
  • Rtu500 Cmu
Published: March 25, 2025

CVE-2025-2312

5.9
    Linux
  • Cifs-Utils
Published: March 25, 2025

CVE-2024-31896

5.9
    Ibm
  • Spss Statistics
Published: March 25, 2025

CVE-2025-2109

5.8
    Wp Compress
  • Wp Compress
Published: March 25, 2025

CVE-2024-8314

5.5
    Br
  • Aprol
Published: March 25, 2025

CVE-2025-2510

5.5
    Frndzk
  • Expandable Bottom Bar
Published: March 25, 2025

CVE-2022-1804

5.5
    Accountsservice
  • Accountsservice
Published: March 25, 2025

CVE-2025-27809

5.4
    Mbed
  • Mbed Tls
Published: March 25, 2025

CVE-2025-27810

5.4
    Mbed
  • Mbedtls
Published: March 25, 2025

CVE-2024-10207

5.3
    Abb
  • Br Aprol
Published: March 25, 2025

CVE-2025-2733

5.3
    Mannaandpoem
  • Openmanus
Published: March 25, 2025

CVE-2025-2224

5.3
    Directorist
  • Ai-Powered Business Directory Plugin
Published: March 25, 2025

CVE-2025-2252

5.3
    Wordpress
  • Easy Digital Downloads
Published: March 25, 2025

CVE-2025-2742

5.3
    Zhijiantianya
  • Ruoyi-Vue-Pro
Published: March 25, 2025

CVE-2025-2743

5.3
    Zhijiantianya
  • Ruoyi-Vue-Pro
Published: March 25, 2025

CVE-2025-2744

5.3
    Zhijiantianya
  • Ruoyi-Vue-Pro
Published: March 25, 2025

CVE-2025-2750

5.3
    Assimp
  • Assimp
Published: March 25, 2025

CVE-2025-2751

5.3
    Assimp
  • Assimp
Published: March 25, 2025

CVE-2025-2752

5.3
    Assimp
  • Open Asset Import Library
Published: March 25, 2025

CVE-2025-2753

5.3
    Assimp
  • Open Asset Import Library
Published: March 25, 2025

CVE-2025-2754

5.3
    Assimp
  • Assimp
Published: March 25, 2025

CVE-2025-2755

5.3
    Assimp
  • Assimp
Published: March 25, 2025

CVE-2025-2756

5.3
    Assimp
  • Assimp
Published: March 25, 2025

CVE-2025-2757

5.3
    Assimp
  • Open Asset Import Library
Published: March 25, 2025

CVE-2025-2717

5.1
    D-Link
  • Dir-823x
Published: March 25, 2025

CVE-2024-10208

5.1
    Br
  • Aprol
Published: March 25, 2025

CVE-2024-53678

5.1
    Apache
  • Vcl
Published: March 25, 2025

CVE-2025-2559

4.9
    Redhat
  • Keycloak
Published: March 25, 2025

CVE-2025-24513

4.8
    Kubernetes
  • Ingress-Nginx
Published: March 25, 2025

CVE-2025-2720

4.8
    Gnome
  • Libgsf
Published: March 25, 2025

CVE-2025-2721

4.8
    Gnome
  • Libgsf
Published: March 25, 2025

CVE-2025-2722

4.8
    Gnome
  • Libgsf
Published: March 25, 2025

CVE-2025-2723

4.8
    Gnome
  • Libgsf
Published: March 25, 2025

CVE-2025-2724

4.8
    Gnome
  • Libgsf
Published: March 25, 2025

CVE-2024-55604

4.8
    Appsmith
  • Appsmith
Published: March 25, 2025

CVE-2024-9770

4.7
    Wordpress
  • Wp-Recall
Published: March 25, 2025

CVE-2025-29789

4.6
    Openemr
  • Openemr
Published: March 25, 2025

CVE-2024-13118

4.3
    Wordpress
  • Ip Based Login
Published: March 25, 2025

CVE-2025-1320

4.3
    Wordpress
  • Teachpress
Published: March 25, 2025

CVE-2024-13710

4.3
    Wordpress
  • Estatebud Plugin
Published: March 25, 2025

CVE-2025-30741

4.3
    Pixelfed
  • Pixelfed
Published: March 25, 2025

CVE-2024-10638

4.1
    Woocommerce
  • Product Labels
Published: March 25, 2025

CVE-2024-12109

4.1
    Woocommerce
  • Product Labels
Published: March 25, 2025

CVE-2025-29932

4.1
    Jetbrains
  • Goland
Published: March 25, 2025

CVE-2024-10554

3.5
    Wordpress
  • Wp-Advanced-Search
Published: March 25, 2025

CVE-2024-10560

3.5
    10web
  • Form Maker
Published: March 25, 2025

CVE-2024-12769

3.5
    Wordpress
  • Simple Banner
Published: March 25, 2025

CVE-2024-13122

3.5
    Wordpress
  • Afi Wordpress Plugin
Published: March 25, 2025

CVE-2024-13123

3.5
    Wp Plugin
  • Afi Plugin
Published: March 25, 2025

CVE-2025-0717

3.5
    *
  • *
Published: March 25, 2025

CVE-2025-1452

3.5
    Wordpress
  • Favorites
Published: March 25, 2025

CVE-2025-30222

2.1
    Shescape
  • Shescape
Published: March 25, 2025

CVE-2024-55029

None
    Nasa
  • Fprime
Published: March 25, 2025
Click here to see more Vulnerabilities