Tag: 2025-04-12

2 Attack Reports | 15 Vulnerabilities

Attack reports

North Korean APT37 Mobile Spyware Discovered

A new Android spyware called KoSpy has been attributed to the North Korean group APT37 (ScarCruft). The malware, active since March 2022, targets Korean and English-speaking users by masquerading as utility apps. KoSpy uses a two-stage C2 infrastructure, retrieving initial configurations from Fireb…
apt
surveillance
north korea
android
spyware
konni
apt37
2025-04-12
scarcruft
kospy
Published: April 12, 2025
Downloadable IOCs: 0

Detailed Analysis of DocSwap Malware Disguised as Security Document Viewer

A new malware called DocSwap, disguised as a document viewing authentication app, was discovered targeting South Korean mobile users. The malware, linked to a North Korean APT group, performs keylogging and information theft through accessibility services. It decrypts an obfuscated APK file, execut…
apt
north korea
south korea
2025-04-12
dpkr
docswap
accessibility services
Published: April 12, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-3418

8.8
    Wordpress
  • Wpc Admin Columns
Published: April 12, 2025

CVE-2025-29834

7.5
    Microsoft
  • Edge
Published: April 12, 2025

CVE-2025-29803

7.3
    Microsoft
  • Visual Studio Tools For Applications
  • Sql Server Management Studio
Published: April 12, 2025

CVE-2025-32726

6.8
    Microsoft
  • Visual Studio Code
Published: April 12, 2025

CVE-2025-3276

6.4
    Wordpress
  • Plugin
Published: April 12, 2025

CVE-2025-1455

6.4
    Royal Elementor Addons
  • Royal Elementor Addons And Templates
Published: April 12, 2025

CVE-2025-1456

6.4
    Royal Elementor
  • Addons And Templates
Published: April 12, 2025

CVE-2025-2269

6.1
    10web
  • Photo Gallery
Published: April 12, 2025

CVE-2025-2841

5.3
    Wordpress
  • Cart66 Cloud
Published: April 12, 2025

CVE-2025-2881

5.3
    Wordpress
  • Developer Toolbar
Published: April 12, 2025

CVE-2024-13338

5.3
    Clearfy
  • Clearfy Cache
Published: April 12, 2025

CVE-2025-3282

5.3
    Wordpress
  • Registration Membership
Published: April 12, 2025

CVE-2025-2871

4.3
    Wordpress
  • Mega Menu Quadmin
Published: April 12, 2025

CVE-2024-13337

4.3
    Wordpress
  • Clearfy Cache
Published: April 12, 2025

CVE-2025-3292

4.3
    Wordpress
  • User Registration And Membership
Published: April 12, 2025
Click here to see more Vulnerabilities