Tag: 2025-04-13

3 Attack Reports | 13 Vulnerabilities

Attack reports

Phishing campaign impersonates Booking.com, delivers a suite of credential-stealing malware

A phishing campaign targeting organizations in the hospitality industry has been identified, impersonating Booking.com and using the ClickFix social engineering technique to deliver multiple credential-stealing malware. The campaign, tracked as Storm-1865, targets individuals likely to work with Bo…
xworm
phishing
social engineering
lumma stealer
asyncrat
danabot
venomrat
clickfix
netsupport rat
booking.com
2025-03-13
credential-stealing
2025-04-13
Published: April 13, 2025
Downloadable IOCs: 0

A Deep Dive into Strela Stealer and how it Targets European Countries

Strela Stealer, an infostealer targeting email clients in specific European countries, has been active since late 2022. It focuses on exfiltrating credentials from Mozilla Thunderbird and Microsoft Outlook. The malware is delivered through phishing campaigns, primarily targeting Spain, Italy, Germa…
obfuscation
phishing
infostealer
2025-03-11
stellar loader
strela stealer
2025-04-13
locale-verification
Published: April 13, 2025
Downloadable IOCs: 0

Analyzing OBSCURE#BAT: Threat Actors Lure Victims into Executing Malicious Batch Scripts to Deploy Stealthy Rootkits

A stealthy malware campaign dubbed OBSCURE#BAT has been discovered, utilizing social engineering and deceptive file downloads to trick users into executing obfuscated code. The infection chain deploys a user-mode rootkit that manipulates system processes and registry entries to evade detection and …
social engineering
api hooking
quasarrat
r77 rootkit
2025-04-13
user-mode rootkit
Published: April 13, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-3538

8.7
    D-Link
  • Di-8100
Published: April 13, 2025

CVE-2025-3539

8.6
    H3c
  • Magic Nx15
  • Magic Nx30 Pro
  • Magic Nx400
  • Magic R3010
  • Magic Be18000
  • *
Published: April 13, 2025

CVE-2025-3445

8.1
    Mholt
  • Archiver
  • Archives
Published: April 13, 2025

CVE-2025-3536

6.9
    Tutorials-Website
  • Employee Management System
Published: April 13, 2025

CVE-2025-3537

6.9
    Tutorials-Website
  • Employee Management System
Published: April 13, 2025

CVE-2025-3423

5.4
    Ibm
  • Aspera Faspex
Published: April 13, 2025

CVE-2025-3531

5.3
    You Dian
  • You Dian Cms
Published: April 13, 2025

CVE-2025-3532

5.3
    Youdiancms
  • Youdiancms
Published: April 13, 2025

CVE-2025-3533

5.3
    Youdiancms
  • Youdiancms
Published: April 13, 2025

CVE-2025-3534

5.3
    Powercreator
  • Cms
Published: April 13, 2025

CVE-2025-3535

5.3
    Shuanx
  • Burpapifinder
Published: April 13, 2025

CVE-2025-2814

None
    Perl
  • Crypt
Published: April 13, 2025

CVE-2024-56406

None
    Perl
  • Perl
Published: April 13, 2025
Click here to see more Vulnerabilities