Tag: 2025-07-06

3 Attack Reports | 13 Vulnerabilities

Attack reports

Fake Spam Plugin Uses Victim's Domain Name to Evade Detection

A sophisticated SEO spam infection was discovered utilizing a cleverly crafted plugin that mimics the infected domain's name to avoid detection. The malware injects spam content into websites, targeting search engine rankings, and only activates under specific conditions like when a crawler is dete…
obfuscation
wordpress
evasion techniques
search engine manipulation
code injection
remote control
2025-07-06
stealth malware
seo spam
plugin disguise
Published: July 6, 2025
Downloadable IOCs: 1

A message from the mechanical shark

Bruce, the mechanical shark from Jaws, reflects on his role in the iconic film 50 years later. He shares insights on the challenges faced during filming due to unpredictable ocean conditions, drawing parallels to cybersecurity. Bruce emphasizes the importance of overpreparing, maintaining perspecti…
phishing
cybersecurity
brand impersonation
cisco talos
2025-07-06
email threats
jaws
pdf payloads
Published: July 6, 2025
Downloadable IOCs: 7

Applications of Snake Keylogger in Geopolitics: Abuse of Trusted Java Utilities in Cybercriminal Activities

A new phishing campaign using Snake Keylogger, a Russian-origin stealer, has been discovered targeting various victims including corporations, governments, and individuals. The campaign uses spear-phishing emails offering petroleum products, with malicious attachments exploiting the legitimate jsad…
credential theft
dll sideloading
java
keylogger
geopolitical
maas
snake keylogger
spear-phishing
2025-07-06
petroleum
Published: July 6, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-5333

9.5
    Symantec
  • *
Published: July 6, 2025

CVE-2025-7077

7.4
    Shenzhen Libituo Technology
  • Lbt-T300-T310
Published: July 6, 2025

CVE-2025-7084

7.4
    Belkin
  • F9k1122
Published: July 6, 2025

CVE-2025-7079

6.3
    Mao888
  • Bluebell-Plus
Published: July 6, 2025

CVE-2025-7080

6.3
    Done-0
  • Jank
Published: July 6, 2025

CVE-2025-7075

5.3
    Blackvue
  • Dashcam 590x
Published: July 6, 2025

CVE-2025-7076

5.3
    Blackvue
  • Dashcam 590x
Published: July 6, 2025

CVE-2025-7078

5.3
    07flycms
  • 07flycms
  • 07fly Cms
  • 07flycrm
Published: July 6, 2025

CVE-2025-7081

5.3
    Belkin
  • F9k1122
Published: July 6, 2025

CVE-2025-7082

5.3
    Belkin
  • F9k1122
Published: July 6, 2025

CVE-2025-7083

5.3
    Belkin
  • F9k1122
Published: July 6, 2025

CVE-2025-27446

None
    Apache
  • Apisix
Published: July 6, 2025

CVE-2025-38235

None
    Linux
  • Linux Kernel
Published: July 6, 2025
Click here to see more Vulnerabilities