Tag: 2025-06-04

9 Attack Reports | 143 Vulnerabilities

Attack reports

From Gamer to Malware Developer: Exploring SilverRat and Its Syrian Roots

This analysis delves into the development and capabilities of Silver RAT, a Remote Access Trojan created by a Syrian developer known as 'noradlb1'. The malware, initially observed in November 2023, offers features such as keylogging, UAC bypass, and data encryption. The developer, active on various…
ransomware
keylogger
remote access trojan
antivirus bypass
telegram channels
2025-06-04
syrian developer
hacking forums
silver rat
Published: June 4, 2025
Downloadable IOCs: 0

PumaBot: Novel Botnet Targeting IoT Surveillance Devices

A new Go-based Linux botnet named PumaBot has been identified targeting IoT devices, particularly surveillance systems. It brute-forces SSH credentials using lists from a C2 server, then deploys itself and establishes persistence. The malware disguises itself as legitimate system files, creates sys…
linux
surveillance
persistence
iot
botnet
credential theft
2025-06-04
pumabot
ssh brute-force
Published: June 4, 2025
Downloadable IOCs: 1

Operation Sindoor – Anatomy of a Digital Siege

Operation Sindoor, a coordinated cyber campaign targeting critical Indian sectors, involved state-sponsored APT activity and hacktivist operations. The campaign utilized spear phishing, malicious scripts, website defacements, and data leaks. APT36, a Pakistan-aligned threat group, deployed advanced…
apt
crimson rat
ares rat
ddos
cyber espionage
hacktivism
data exfiltration
spear phishing
operation sindoor
2025-06-04
hybrid warfare
website defacement
Published: June 4, 2025
Downloadable IOCs: 0

GreyNoise Discovers Stealthy Backdoor Campaign Affecting Thousands of ASUS Routers

A sophisticated campaign targeting ASUS routers has been uncovered, compromising thousands of devices. The attackers employ brute-force attempts, authentication bypasses, and exploit CVE-2023-39780 to gain initial access. They establish persistence by enabling SSH access on a custom port and insert…
backdoor
apt
persistence
botnet
ssh
stealth
authentication bypass
asus routers
CVE-2023-39780
2025-06-04
nvram
Published: June 4, 2025
Downloadable IOCs: 3

Behind the Script: Unmasking Phishing Attacks Using Google Apps Script

A sophisticated phishing campaign has been identified that leverages Google Apps Script to create a false sense of security. The attack begins with an email masquerading as an invoice, containing a link to a webpage hosted on Google's trusted environment. When clicked, the link redirects to a fake …
phishing
social engineering
credential theft
email spoofing
2025-06-04
google apps script
invoice scam
microsoft login
Published: June 4, 2025
Downloadable IOCs: 2

Analysis of T-Rex CoinMiner Attacks Targeting Internet Cafés in Korea

A series of attacks targeting Korean Internet cafés have been identified, focusing on systems with specific management software installed. The threat actor, active since 2022, uses Gh0st RAT for system control and ultimately installs T-Rex CoinMiner for cryptocurrency mining. The initial access met…
gh0st rat
cryptocurrency mining
2025-06-04
phoenixminer
gpu mining
t-rex coinminer
Published: June 4, 2025
Downloadable IOCs: 9

The strange tale of ischhfd83: When cybercriminals eat their own

This investigation uncovered a large-scale campaign involving backdoored GitHub repositories targeting game cheaters and inexperienced cybercriminals. The threat actor, possibly linked to a Distribution-as-a-Service operation, uses multiple types of backdoors and a convoluted infection chain leadin…
backdoor
obfuscation
rat
infostealer
remcos
lumma stealer
asyncrat
github
telegram
2025-06-04
Published: June 4, 2025
Downloadable IOCs: 52

AMOS Variant Distributed Via Clickfix In Spectrum-Themed Dynamic Delivery Campaign By Russian Speaking Hackers

A sophisticated campaign using typo-squatted 'Spectrum' domains has been uncovered, spreading a new Atomic macOS Stealer (AMOS) variant. The attack, disguised as a CAPTCHA verification, employs dynamic payloads based on the victim's operating system. For macOS users, a malicious shell script steals…
social engineering
typosquatting
credential theft
clickfix
poseidon
amos
2025-06-04
dynamic payload
spectrum
multi-platform attack
macos stealer
Published: June 4, 2025
Downloadable IOCs: 4

Cyber Attacks on Government Agencies: Detect and Investigate

This analysis examines cyber threats targeting government institutions worldwide, focusing on three case studies: a phishing email targeting the South Carolina Department of Employment and Workforce, a fraudulent domain mimicking the U.S. Social Security Administration, and a malicious PDF posing a…
screenconnect
phishing
stealer
government
pdf
remote-access
formbook
domain-spoofing
2025-06-04
credential-harvesting
Published: June 4, 2025
Downloadable IOCs: 2
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-5597

10.0
    Wf Steuerungstechnik
  • Airleader Master
Published: June 4, 2025

CVE-2025-20286

9.9
    Cisco
  • Identity Services Engine
Published: June 4, 2025

CVE-2025-49223

9.8
    Navercorp
  • Billboard.Js
Published: June 4, 2025

CVE-2025-4578

9.8
    Dimdavid
  • File Provider
Published: June 4, 2025

CVE-2024-13967

9.4
    Abb
  • Eibport
Published: June 4, 2025

CVE-2025-5600

9.3
    Totolink
  • Ex1200t
Published: June 4, 2025

CVE-2025-5598

9.2
    Wf Steuerungstechnik Gmbh
  • Airleader Master
Published: June 4, 2025

CVE-2025-1701

8.9
    Mim Software
  • Mim Admin Service
Published: June 4, 2025

CVE-2025-5482

8.8
    Wordpress
  • Sunshine Photo Cart
Published: June 4, 2025

CVE-2025-20261

8.8
    Cisco
  • Integrated Management Controller
  • Ucs B Series
  • Ucs C Series
  • Ucs S Series
  • Ucs X Series
Published: June 4, 2025

CVE-2025-5572

8.7
    D-Link
  • Dcs-932l
Published: June 4, 2025

CVE-2025-20163

8.7
    Cisco
  • Nexus Dashboard Fabric Controller
Published: June 4, 2025

CVE-2025-5607

8.7
    Tenda
  • Ac18
Published: June 4, 2025

CVE-2025-5608

8.7
    Tenda
  • Ac18
Published: June 4, 2025

CVE-2025-5609

8.7
    Tenda
  • Ac18
Published: June 4, 2025

CVE-2025-5619

8.7
    Tenda
  • Ch22
Published: June 4, 2025

CVE-2025-29093

8.2
    Motivian
  • Content Management System
Published: June 4, 2025

CVE-2025-5601

7.8
    Wireshark
  • Wireshark
Published: June 4, 2025

CVE-2025-27811

7.8
    Razer
  • Synapse
Published: June 4, 2025

CVE-2025-48947

7.7
    Auth0
  • Nextjs-Auth0
Published: June 4, 2025

CVE-2018-25112

7.5
    *
  • *
Published: June 4, 2025

CVE-2025-30415

7.5
    Acronis
  • Cyber Protect Cloud Agent
Published: June 4, 2025

CVE-2025-5688

7.5
    *
  • Llmnr
  • Mdns
Published: June 4, 2025

CVE-2025-22243

7.5
    Vmware
  • Vmware Nsx Manager
Published: June 4, 2025

CVE-2024-31127

7.3
    Zscaler
  • Zscaler Client Connector
Published: June 4, 2025

CVE-2025-47724

7.3
    Delta Electronics
  • Cncsoft
Published: June 4, 2025

CVE-2025-47725

7.3
    Delta Electronics
  • Cncsoft
Published: June 4, 2025

CVE-2025-47726

7.3
    Delta Electronics
  • Cncsoft
Published: June 4, 2025

CVE-2025-47727

7.3
    Delta Electronics
  • Cncsoft
Published: June 4, 2025

CVE-2025-47728

7.3
    Delta Electronics
  • Cncsoft-G2
Published: June 4, 2025

CVE-2025-48961

7.3
    Acronis
  • Cyber Protect
Published: June 4, 2025

CVE-2025-46341

7.1
    Freshrss
  • Freshrss
Published: June 4, 2025

CVE-2025-5547

6.9
    Freefloat
  • Ftp Server
Published: June 4, 2025

CVE-2025-5548

6.9
    Freefloat
  • Ftp Server
Published: June 4, 2025

CVE-2025-5549

6.9
    Freefloat
  • Ftp Server
Published: June 4, 2025

CVE-2025-5550

6.9
    Freefloat
  • Ftp Server
Published: June 4, 2025

CVE-2025-5551

6.9
    Freefloat
  • Ftp Server
Published: June 4, 2025

CVE-2025-5553

6.9
    Phpgurukul
  • Rail Pass Management System
Published: June 4, 2025

CVE-2025-5560

6.9
    Phpgurukul
  • Curfew E-Pass Management System
Published: June 4, 2025

CVE-2025-5561

6.9
    Phpgurukul
  • Curfew E-Pass Management System
Published: June 4, 2025

CVE-2025-5562

6.9
    Phpgurukul
  • Curfew E-Pass Management System
Published: June 4, 2025

CVE-2025-5574

6.9
    Phpgurukul
  • Dairy Farm Shop Management System
Published: June 4, 2025

CVE-2025-5575

6.9
    Phpgurukul
  • Dairy Farm Shop Management System
Published: June 4, 2025

CVE-2025-5576

6.9
    Phpgurukul
  • Dairy Farm Shop Management System
Published: June 4, 2025

CVE-2025-5577

6.9
    Phpgurukul
  • Dairy Farm Shop Management System
Published: June 4, 2025

CVE-2025-5578

6.9
    Phpgurukul
  • Dairy Farm Shop Management System
Published: June 4, 2025

CVE-2025-5579

6.9
    Phpgurukul
  • Dairy Farm Shop Management System
Published: June 4, 2025

CVE-2025-5580

6.9
    Codeastro
  • Real Estate Management System
Published: June 4, 2025

CVE-2025-5581

6.9
    Codeastro
  • Real Estate Management System
Published: June 4, 2025

CVE-2025-5583

6.9
    Codeastro
  • Real Estate Management System
Published: June 4, 2025

CVE-2025-5592

6.9
    Freefloat
  • Ftp Server
Published: June 4, 2025

CVE-2025-5593

6.9
    Freefloat
  • Ftp Server
Published: June 4, 2025

CVE-2025-5594

6.9
    Freefloat
  • Ftp Server
Published: June 4, 2025

CVE-2025-5595

6.9
    Freefloat
  • Ftp Server
Published: June 4, 2025

CVE-2025-5596

6.9
    Freefloat
  • Ftp Server
Published: June 4, 2025

CVE-2025-5599

6.9
    Phpgurukul
  • Student Result Management System
Published: June 4, 2025

CVE-2025-5602

6.9
    Campcodes
  • Hospital Management System
Published: June 4, 2025

CVE-2025-5603

6.9
    Campcodes
  • Hospital Management System
Published: June 4, 2025

CVE-2025-5604

6.9
    Campcodes
  • Hospital Management System
Published: June 4, 2025

CVE-2025-22244

6.9
    Vmware
  • Nsx
Published: June 4, 2025

CVE-2025-20984

6.8
    Samsung
  • Samsung Cloud
  • Galaxy Watch
Published: June 4, 2025

CVE-2025-48959

6.7
    Acronis
  • Cyber Protect Cloud Agent
Published: June 4, 2025

CVE-2025-31136

6.7
    Freshrss
  • Freshrss
Published: June 4, 2025

CVE-2025-32015

6.7
    Freshrss
  • Freshrss
Published: June 4, 2025

CVE-2025-49007

6.6
    Ruby
  • Rack
Published: June 4, 2025

CVE-2025-23095

6.5
    Samsung
  • Mobile Processor Exynos
Published: June 4, 2025

CVE-2025-23096

6.5
    Samsung
  • Exynos
Published: June 4, 2025

CVE-2025-23101

6.5
    Samsung
  • Exynos
Published: June 4, 2025

CVE-2025-23106

6.5
    Samsung
  • Mobile Processor
Published: June 4, 2025

CVE-2025-46011

6.5
    Listmonk
  • Listmonk
Published: June 4, 2025

CVE-2025-46203

6.5
    Unifiedtransform
  • Unifiedtransform
Published: June 4, 2025

CVE-2025-46204

6.5
    Unifiedtransform
  • Unifiedtransform
Published: June 4, 2025

CVE-2025-5690

6.5
    Postgresql
  • Anonymizer
Published: June 4, 2025

CVE-2025-5531

6.4
    Wordpress
  • Employee Directory Staff Listing Team Directory
Published: June 4, 2025

CVE-2025-5532

6.4
    Wordpress
  • Campus Directory
Published: June 4, 2025

CVE-2025-5539

6.4
    Wordpress
  • Simple Contact Form Plugin
Published: June 4, 2025

CVE-2025-20981

6.2
    Samsung
  • Audioservice
Published: June 4, 2025

CVE-2025-29094

6.1
    Motivian
  • Motivian Content Management System
Published: June 4, 2025

CVE-2025-20273

6.1
    Cisco
  • Unified Intelligent Contact Management Enterprise
Published: June 4, 2025

CVE-2025-20278

6.0
    Cisco
  • Cisco Unified Communications
Published: June 4, 2025

CVE-2025-48960

5.9
    Acronis
  • Cyber Protect
Published: June 4, 2025

CVE-2025-22245

5.9
    Vmware
  • Nsx
Published: June 4, 2025

CVE-2025-20985

5.5
    Samsung
  • Thememanager
Published: June 4, 2025

CVE-2025-20986

5.5
    Samsung
  • Galaxy Watch
Published: June 4, 2025

CVE-2025-20988

5.5
    Samsung
  • Fingerprint Trustlet
Published: June 4, 2025

CVE-2025-31134

5.5
    Freshrss
  • Freshrss
Published: June 4, 2025

CVE-2025-48888

5.5
    Deno
  • Deno
Published: June 4, 2025

CVE-2025-48934

5.5
    Deno
  • Deno
Published: June 4, 2025

CVE-2025-48935

5.5
    Deno
  • Deno
Published: June 4, 2025

CVE-2025-5545

5.3
    Aaluoxiang
  • Oa System
Published: June 4, 2025

CVE-2025-5546

5.3
    Phpgurukul
  • Daily Expense Tracker System
Published: June 4, 2025

CVE-2025-5552

5.3
    Chestnutcms
  • Chestnutcms
Published: June 4, 2025

CVE-2025-5554

5.3
    Phpgurukul
  • Rail Pass Management System
Published: June 4, 2025

CVE-2025-5556

5.3
    Phpgurukul
  • Teacher Subject Allocation Management System
Published: June 4, 2025

CVE-2025-5557

5.3
    Phpgurukul
  • Teacher Subject Allocation Management System
Published: June 4, 2025

CVE-2025-5558

5.3
    Phpgurukul
  • Teacher Subject Allocation Management System
Published: June 4, 2025

CVE-2025-5566

5.3
    Phpgurukul
  • Notice Board System
Published: June 4, 2025

CVE-2025-5569

5.3
    Ideacms
  • Ideacms
Published: June 4, 2025

CVE-2025-5571

5.3
    D-Link
  • Dcs-932l
Published: June 4, 2025

CVE-2025-5573

5.3
    D-Link
  • Dcs-932l
Published: June 4, 2025

CVE-2025-5582

5.3
    Codeastro
  • Real Estate Management System
Published: June 4, 2025

CVE-2025-20259

5.3
    Cisco
  • Thousandeyes Endpoint Agent
Published: June 4, 2025

CVE-2025-20275

5.3
    Cisco
  • Unified Contact Center Express Editor
Published: June 4, 2025

CVE-2025-5606

5.3
    Tenda
  • Ac18
Published: June 4, 2025

CVE-2025-5610

5.3
    Codeastro
  • Real Estate Management System
Published: June 4, 2025

CVE-2025-5611

5.3
    Codeastro
  • Real Estate Management System
Published: June 4, 2025

CVE-2025-5612

5.3
    Phpgurukul
  • Online Fire Reporting System
Published: June 4, 2025

CVE-2025-5613

5.3
    Phpgurukul
  • Online Fire Reporting System
Published: June 4, 2025

CVE-2025-5614

5.3
    Phpgurukul
  • Online Fire Reporting System
Published: June 4, 2025

CVE-2025-5615

5.3
    Phpgurukul
  • Online Fire Reporting System
Published: June 4, 2025

CVE-2025-5616

5.3
    Phpgurukul
  • Online Fire Reporting System
Published: June 4, 2025

CVE-2025-5617

5.3
    Phpgurukul
  • Online Fire Reporting System
Published: June 4, 2025

CVE-2025-5618

5.3
    Phpgurukul
  • Online Fire Reporting System
Published: June 4, 2025

CVE-2025-20987

5.2
    Samsung
  • Fingerprint Trustlet
Published: June 4, 2025

CVE-2025-20989

5.2
    Samsung
  • Fingerprint Trustlet
Published: June 4, 2025

CVE-2025-20996

5.0
    Samsung
  • Smart Switch
Published: June 4, 2025

CVE-2025-20995

4.9
    Samsung
  • Samsung Internet
Published: June 4, 2025

CVE-2025-20130

4.9
    Cisco
  • Identity Services Engine
  • Ise Passive Identity Connector
Published: June 4, 2025

CVE-2025-27444

4.8
    Joomla
  • Rsform Pro
Published: June 4, 2025

CVE-2025-5584

4.8
    Phpgurukul
  • Hospital Management System
Published: June 4, 2025

CVE-2025-20279

4.8
    Cisco
  • Cisco Unified Ccx
Published: June 4, 2025

CVE-2025-2336

4.8
    Angularjs
  • Angularjs
Published: June 4, 2025

CVE-2025-20994

4.5
    Samsung
  • Samsung Internet
Published: June 4, 2025

CVE-2025-4580

4.3
    Dimdavid
  • File Provider
Published: June 4, 2025

CVE-2025-48962

4.3
    Acronis
  • Cyber Protect
Published: June 4, 2025

CVE-2025-20129

4.3
    Cisco
  • Customer Collaboration Platform
  • Socialminer
Published: June 4, 2025

CVE-2025-31482

4.3
    Freshrss
  • Freshrss
Published: June 4, 2025

CVE-2025-46339

4.3
    Freshrss
  • Freshrss
Published: June 4, 2025

CVE-2025-48710

4.1
    Kro
  • Kube Resource Orchestrator
Published: June 4, 2025

CVE-2025-20991

4.0
    Samsung
  • Bluetooth
    Android
Published: June 4, 2025

CVE-2025-20992

4.0
    Samsung
  • Libsecimaging.Camera
Published: June 4, 2025

CVE-2025-20993

4.0
    Samsung
  • Libsecimaging.Camera.Samsung.So
Published: June 4, 2025

CVE-2025-20276

3.8
    Cisco
  • Cisco Unified Ccx
Published: June 4, 2025

CVE-2025-20277

3.4
    Cisco
  • Unified Ccx
Published: June 4, 2025

CVE-2025-49202

None
    Fortinet
  • Fortinet
Published: June 4, 2025

CVE-2025-49203

None
    Fortinet
  • Fortinet
Published: June 4, 2025

CVE-2025-49204

None
    Fortinet
  • Fortinet
Published: June 4, 2025

CVE-2025-49205

None
    Fortinet
  • Fortinet
Published: June 4, 2025

CVE-2025-49206

None
    Fortinet
  • Fortinet
Published: June 4, 2025

CVE-2025-49207

None
    Fortinet
  • Fortinet
Published: June 4, 2025

CVE-2025-49208

None
    Fortinet
  • Fortinet
Published: June 4, 2025

CVE-2025-49209

None
    Fortinet
  • Fortigate
  • Forticlient
Published: June 4, 2025

CVE-2025-49210

None
    Fortinet
  • *
Published: June 4, 2025
Click here to see more Vulnerabilities