Tag: 2025-04-10

11 Attack Reports | 108 Vulnerabilities

Attack reports

Newly Registered Domains Distributing SpyNote Malware

Cybercriminals are employing deceptive websites on newly registered domains to distribute AndroidOS SpyNote malware. These sites imitate the Google Chrome install page on the Google Play Store, tricking users into downloading SpyNote, a powerful Android remote access trojan. SpyNote is used for sur…
rat
phishing
android
spynote
remote access
keylogging
data exfiltration
spymax
google play store
2025-04-10
apk dropper
androidos
2025-04-15
Published: April 15, 2025
Downloadable IOCs: 0

Atomic and Exodus crypto wallets targeted in malicious npm campaign

A malicious npm package named pdf-to-office was discovered targeting cryptocurrency wallets. The package, posing as a PDF to Office converter, injects malicious code into locally installed Atomic and Exodus wallets. This attack modifies legitimate files to redirect crypto funds to the attacker's wa…
cryptocurrency
persistence
npm
atomic
software supply chain
exodus
patching
2025-04-10
wallet
2025-04-14
trojanized code
atomic wallet
Published: April 14, 2025
Downloadable IOCs: 1

Unraveling the U.S. toll road smishing scams

A widespread financial theft SMS phishing campaign targeting toll road users across multiple U.S. states has been observed since October 2024. The attacks impersonate automatic payment services like E-ZPass, claiming outstanding bills under $5 USD and warning of late fees. Victims are directed to s…
typosquatting
phishing kit
smishing
sms phishing
2025-04-10
toll road
u.s. states
financial theft
2025-04-11
toll road scams
Published: April 11, 2025
Linked vulnerabilities : CVE-2024-4577 (CVSS 9.8)
Downloadable IOCs: 43

Shuckworm Targets Foreign Military Mission Based in Ukraine

Russian-linked cyber-espionage group Shuckworm appears to be targeting a Western military mission based in Ukraine, according to research by Symantec and its partner, the UK-based security firm.
powershell
infostealer
ukraine
c server
gamaredon
shuckworm
2025-04-10
gammasteel
desktop folder
armageddon
Published: April 10, 2025
Downloadable IOCs: 56

Amazon Gift Card Email Hooks Microsoft Credentials

The Cofense Phishing Defense Center (PDC) has identified a new credential phishing campaign that uses an Amazon e-gift card to harvest Microsoft login credentials from unsuspecting recipients in 2025.
phishing
amazon
credentials
outlook
2025-04-10
amazon gift
activationshub
Published: April 10, 2025
Downloadable IOCs: 2

Operation Sea Elephant: The Dying Walrus Wandering the Indian Ocean

The CNC group, with South Asian origins, has been targeting domestic teachers, students, and research institutions. Their operation, named 'sea elephant', aims to spy on scientific research achievements in the ocean field. The group employs various tactics, including spear-phishing emails, IM softw…
steganography
keylogging
south asia
usb propagation
file stealing
2025-04-10
sogou_pinyinupdater.exe
scientific espionage
tericerit.exe
srclogsys.exe
cachestore.exe
github api
konlinesetupupdate_xa.exe
ocean research
windowassistance.exe
huaweihisuiteservice64.exe
filecoauthx86.exe
aliyun_updater64.exe
youdaogui.exe
mscleanup64.exe
windowsfilters.exe
qaxreporter.exe
Published: April 10, 2025
Downloadable IOCs: 0

Blind Eagle: ...And Justice for All

Check Point Research uncovered ongoing campaigns by Blind Eagle (APT-C-36) targeting Colombian institutions since November 2024. The group utilized malicious .url files, similar to CVE-2024-43451, to deliver HeartCrypt-packed malware and Remcos RAT. Campaigns infected over 1,600 victims in a single…
phishing
remcos
government
purecrypter
webdav
remcos rat
CVE-2024-43451
heartcrypt
2025-04-10
apt-c-36
colombia
Published: April 10, 2025
Downloadable IOCs: 0

ViperSoftX Malware Distributed by Arabic-Speaking Threat Actor

An Arabic-speaking threat actor has been distributing ViperSoftX malware to Korean victims since April 1, 2025. The malware, typically spread through cracked software or torrents, operates as a PowerShell script and communicates with C&C servers. The campaign involves downloading additional malware…
powershell
purecrypter
quasar rat
vipersoftx
evasion techniques
vbs
2025-04-10
c&c communication
arabic-speaking
Published: April 10, 2025
Downloadable IOCs: 0

March 2025 Trends Report on Phishing Emails

The report analyzes phishing email trends in March 2025, revealing that phishing attacks constituted 59% of email threats. Attackers primarily used HTML scripts to mimic login pages and promotional content, aiming to steal user credentials. The analysis covers distribution statistics, Korean phishi…
phishing
social engineering
malware distribution
credential theft
infostealers
email attachments
2025-04-10
downloaders
html scripts
document exploits
compressed files
Published: April 10, 2025
Downloadable IOCs: 0

March 2025 APT Group Trends (South Korea)

This intelligence report analyzes Advanced Persistent Threat (APT) attacks in South Korea during March 2025. The majority of attacks were classified as spear phishing, with LNK file distribution being the most prevalent method. Two types of LNK-based attacks were identified: Type A, which uses a CA…
obfuscation
apt
python
powershell
south korea
pebbledash
lnk files
spear phishing
2025-04-10
nukesped
task scheduler
cab files
Published: April 10, 2025
Downloadable IOCs: 0

Smishing Triad: Chinese eCrime Group Targets 121+ Countries, Introduces New Banking Phishing Kit

The Chinese eCrime group Smishing Triad has launched a global SMS phishing campaign targeting over 121 countries across various industries. Their infrastructure generates over one million page visits in 20 days, averaging 50,000 daily. The group has introduced a new 'Lighthouse' phishing kit focusi…
banking
phishing kit
infrastructure
sms phishing
chinese threat actors
2025-04-10
ecrime
global campaign
Published: April 10, 2025
Downloadable IOCs: 93
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-32140

9.9
    Nirmal Kumar Ram
  • Wp Remote Thumbnail
Published: April 10, 2025

CVE-2025-27690

9.8
    Dell
  • Powerscale Onefs
Published: April 10, 2025

CVE-2025-22375

9.3
    Videx
  • Cyberaudit-Web
Published: April 10, 2025

CVE-2025-32202

9.1
    Elearningfreak
  • Insert Or Embed Articulate Content
Published: April 10, 2025

CVE-2025-32206

9.1
    Labcat
  • Processing Projects
Published: April 10, 2025

CVE-2025-32754

9.1
    Jenkins
  • Ssh-Agent
Published: April 10, 2025

CVE-2025-32755

9.1
    Jenkins
  • Ssh-Slave
Published: April 10, 2025

CVE-2024-58136

9.0
    Yiisoft
  • Yii
Published: April 10, 2025

CVE-2025-32743

9.0
    Connman
  • Connman
Published: April 10, 2025

CVE-2025-3417

8.8
    Wordpress
  • Embedder Plugin
Published: April 10, 2025

CVE-2025-31524

8.8
    Notfound
  • Wp User Profiles
Published: April 10, 2025

CVE-2025-32145

8.8
    Magepeopleteam
  • Wp Evently
Published: April 10, 2025

CVE-2025-29017

8.8
    Code Astro
  • Internet Banking System
Published: April 10, 2025

CVE-2025-32687

8.5
    Magnigenie
  • Review Stars Count For Woocommerce
Published: April 10, 2025

CVE-2025-32119

8.2
    Cardgate
  • Cardgate Payments For Woocommerce
Published: April 10, 2025

CVE-2025-3102

8.1
    Suretriggers
  • Suretriggers
Published: April 10, 2025

CVE-2025-30582

8.1
    Aytechnet
  • Dyapress Erp Crm
Published: April 10, 2025

CVE-2025-32668

8.1
    Rameez Iqbal
  • Real Estate Manager
Published: April 10, 2025

CVE-2025-27812

8.1
    Msi
  • Msi Center
Published: April 10, 2025

CVE-2025-27813

8.1
    Msi
  • Msi Center
Published: April 10, 2025

CVE-2025-23386

7.8
    Gerbera
  • Gerbera
Published: April 10, 2025

CVE-2025-32128

7.6
    Aaronfrey
  • Nearby Locations
Published: April 10, 2025

CVE-2025-32158

7.5
    Athemes
  • Athemes Addons For Elementor
Published: April 10, 2025

CVE-2025-32160

7.5
    Ashan Perera
  • Eventon
Published: April 10, 2025

CVE-2025-22279

7.5
    Crocoblock
  • Jetcomparewishlist
Published: April 10, 2025

CVE-2025-1073

7.5
    Panasonic
  • Ir Control Hub
Published: April 10, 2025

CVE-2025-29915

7.5
    Suricata
  • Suricata
Published: April 10, 2025

CVE-2025-2805

7.3
    Wordpress
  • Order Post
Published: April 10, 2025

CVE-2025-2809

7.3
    Azurecurve
  • Shortcodes In Comments
Published: April 10, 2025

CVE-2025-23008

7.2
    Sonicwall
  • Netextender
Published: April 10, 2025

CVE-2024-13874

7.1
    Feedify
  • Feedify Plugin
Published: April 10, 2025

CVE-2025-32114

7.1
    5sterrenspecialist
  • 5sterrenspecialist
Published: April 10, 2025

CVE-2025-32115

7.1
    Otwthemes
  • Popping Content Light
Published: April 10, 2025

CVE-2025-32116

7.1
    Studi7
  • Qr Master
Published: April 10, 2025

CVE-2025-27350

7.1
    Hugh Mungus
  • Vice Versa
Published: April 10, 2025

CVE-2025-26330

7.0
    Dell
  • Powerscale Onefs
Published: April 10, 2025

CVE-2025-27081

6.8
    Hpe
  • Nonstop Osm Service Connection Suite
Published: April 10, 2025

CVE-2025-22471

6.5
    Dell
  • Powerscale Onefs
Published: April 10, 2025

CVE-2024-13896

6.5
    Wordpress
  • Wp-Geshi-Highlight
Published: April 10, 2025

CVE-2025-2719

6.5
    Swatchly
  • Woocommerce Variation Swatches
Published: April 10, 2025

CVE-2025-32198

6.5
    Themefusecom
  • Brizy
Published: April 10, 2025

CVE-2025-32199

6.5
    Vcita
  • Contact Form Builder
Published: April 10, 2025

CVE-2025-32208

6.5
    Hive
  • Support
Published: April 10, 2025

CVE-2025-32209

6.5
    Totalprocessing
  • Total Processing Card Payments For Woocommerce
Published: April 10, 2025

CVE-2025-32210

6.5
    Creativemindssolutions
  • Cm Registration And Invitation Codes
Published: April 10, 2025

CVE-2025-32212

6.5
    Specia
  • Specia Companion
Published: April 10, 2025

CVE-2025-32213

6.5
    Flothemes
  • Flo Forms
Published: April 10, 2025

CVE-2025-32214

6.5
    Hive Support
  • Hive Support
Published: April 10, 2025

CVE-2025-32215

6.5
    Ability Inc
  • Accessibility Suite
    Online Ada
Published: April 10, 2025

CVE-2025-32240

6.5
    Notfound
  • Site Notify
Published: April 10, 2025

CVE-2025-32242

6.5
    Hive Support
  • Hive Support
Published: April 10, 2025

CVE-2025-32243

6.5
    Toast Plugins
  • Internal Link Optimiser
Published: April 10, 2025

CVE-2025-32244

6.5
    Quantumcloud
  • Seo Help
Published: April 10, 2025

CVE-2025-1677

6.5
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: April 10, 2025

CVE-2023-43037

6.5
    Ibm
  • Maximo Application Suite
Published: April 10, 2025

CVE-2025-23010

6.5
    Sonicwall
  • Netextender
Published: April 10, 2025

CVE-2024-10894

6.4
    Paystack
  • Payment Forms For Wordpress
Published: April 10, 2025

CVE-2025-32216

6.4
    Spider Themes
  • Spider Elements
Published: April 10, 2025

CVE-2025-32391

6.4
    Hedgedoc
  • Hedgedoc
Published: April 10, 2025

CVE-2025-0362

6.4
    Gitlab
  • Gitlab
Published: April 10, 2025

CVE-2024-11129

6.3
    Gitlab
  • Gitlab Ee
Published: April 10, 2025

CVE-2025-29916

6.2
    Oisf
  • Suricata
Published: April 10, 2025

CVE-2025-29917

6.2
    Suricata
  • Suricata
Published: April 10, 2025

CVE-2025-29918

6.2
    Suricata
  • Suricata
Published: April 10, 2025

CVE-2025-32027

6.1
    Yiisoft
  • Yii
Published: April 10, 2025

CVE-2024-38865

6.0
    Checkmk
  • Checkmk
Published: April 10, 2025

CVE-2025-22374

6.0
    Videx
  • Cyberaudit-Web
Published: April 10, 2025

CVE-2025-32395

6.0
    Vite
  • Vite
Published: April 10, 2025

CVE-2025-0539

5.9
    Octopus
  • Octopus Deploy
Published: April 10, 2025

CVE-2025-32139

5.9
    Bradvin
  • Foobox Image Lightbox
Published: April 10, 2025

CVE-2025-31411

5.9
    Aribhour
  • Linet Erp Woocommerce Integration
Published: April 10, 2025

CVE-2025-23009

5.9
    Sonicwall
  • Netextender
Published: April 10, 2025

CVE-2025-32221

5.4
    Spider Themes
  • Eazydocs
Published: April 10, 2025

CVE-2025-25197

5.4
    Silverstripe
  • Elemental
Published: April 10, 2025

CVE-2025-30148

5.4
    Silverstripe
  • Silverstripe Framework
Published: April 10, 2025

CVE-2023-42007

5.4
    Ibm
  • Sterling Control Center
Published: April 10, 2025

CVE-2025-26480

5.3
    Dell
  • Powerscale Onefs
Published: April 10, 2025

CVE-2025-3489

5.3
    Nababur
  • Simple-User-Management-System
Published: April 10, 2025

CVE-2025-32259

5.3
    Alimir
  • Wp Ulike
Published: April 10, 2025

CVE-2025-32260

5.3
    Detheme
  • Dethemekit
Published: April 10, 2025

CVE-2025-2408

5.3
    Gitlab
  • Gitlab
Published: April 10, 2025

CVE-2025-22232

5.3
    Spring
  • Spring Cloud Config
Published: April 10, 2025

CVE-2024-13909

4.9
    Wordpress
  • Accredible Certificates And Open Badges
Published: April 10, 2025

CVE-2025-32728

4.3
    Openssh
  • Openssh
Published: April 10, 2025

CVE-2025-32227

4.3
    Asgaros
  • Asgaros Forum
Published: April 10, 2025

CVE-2025-32228

4.3
    Wp-Messiah
  • Ai Image Alt Text Generator
Published: April 10, 2025

CVE-2025-32230

4.3
    Themeum
  • Tutor Lms
Published: April 10, 2025

CVE-2025-32236

4.3
    Vagonic
  • Woocommerce Products Reorder Drag Drop Multiple Sort
Published: April 10, 2025

CVE-2025-32275

4.3
    Ays Pro
  • Survey Maker
Published: April 10, 2025

CVE-2025-32282

4.3
    Sharethis
  • Sharethis Dashboard
Published: April 10, 2025

CVE-2025-32383

4.3
    Maxkb
  • Maxkb
Published: April 10, 2025

CVE-2025-29150

4.3
    Bluecms
  • Bluecms
Published: April 10, 2025

CVE-2023-43035

4.0
    Ibm
  • Sterling Control Center
Published: April 10, 2025

CVE-2025-2469

3.7
    Gitlab
  • Gitlab Ce
  • Gitlab Ee
Published: April 10, 2025

CVE-2025-23378

3.3
    Dell
  • Powerscale Onefs
Published: April 10, 2025

CVE-2025-29989

3.1
    Dell
  • Client Platform Bios
Published: April 10, 2025

CVE-2025-26479

3.1
    Dell
  • Powerscale Onefs
Published: April 10, 2025

CVE-2025-32205

2.7
    Piotnetdotcom
  • Piotnet Forms
Published: April 10, 2025

CVE-2025-24866

2.7
    Mattermost
  • Mattermost
Published: April 10, 2025

CVE-2025-32700

2.3
    Wikimedia
  • Abusefilter
Published: April 10, 2025

CVE-2025-32698

2.1
    Mediawiki
  • Mediawiki
Published: April 10, 2025

CVE-2025-32699

2.1
    Wikimedia
  • Mediawiki
  • Parsoid
Published: April 10, 2025

CVE-2025-32382

1.8
    Metabase
  • Metabase
Published: April 10, 2025

CVE-2025-32696

0.0
    Wikimedia
  • Mediawiki
Published: April 10, 2025

CVE-2025-32697

0.0
    Wikimedia
  • Mediawiki
Published: April 10, 2025

CVE-2025-3469

0.0
    Wikimedia
  • Mediawiki
Published: April 10, 2025

CVE-2025-2873

None
Published: April 10, 2025

CVE-2025-29088

None
    Sqlite
  • Sqlite
Published: April 10, 2025
Click here to see more Vulnerabilities