Tag: 2025-07-07

3 Attack Reports | 1 Vulnerabilities

Attack reports

Digging Gold with a Spoon – Resurgence of Monero-mining Malware

A resurgence of malware deploying XMRig cryptominer was discovered in mid-April 2025, coinciding with a rally in Monero cryptocurrency value. The malware uses a multi-staged approach and LOLBAS techniques, leveraging Windows tools like PowerShell for payload delivery, detection evasion, and persist…
powershell
xmrig
persistence
cryptomining
monero
lolbas
windows defender evasion
2025-07-07
Published: July 7, 2025
Downloadable IOCs: 4

Batavia spyware steals data from Russian organizations

The Batavia spyware campaign, active since July 2024, targets Russian industrial enterprises through phishing emails containing malicious links disguised as contract documents. The infection process involves three stages: a VBS script downloader, the WebView.exe spyware, and the javav.exe module. T…
phishing
spyware
uac bypass
multi-stage infection
2025-07-07
vbs script
webview.exe
batavia
javav.exe
Published: July 7, 2025
Downloadable IOCs: 2

BERT Ransomware Group Targets Asia and Europe on Multiple Platforms

A newly emerged ransomware group called BERT has been targeting organizations across Asia and Europe since April. The group employs simple code with effective execution, impacting sectors such as healthcare, technology, and event services. BERT's ransomware operates on both Windows and Linux platfo…
linux
ransomware
powershell
windows
encryption
esxi
europe
asia
2025-07-07
bert
Published: July 7, 2025
Downloadable IOCs: 9
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-7099

6.3
    Boyuncms
  • Boyuncms
Published: July 7, 2025
Click here to see more Vulnerabilities