Tag: 2025-07-11

4 Attack Reports | 0 Vulnerabilities

Attack reports

The Solidity Language open-source package was used in a $500,000 crypto heist

A blockchain developer in Russia lost $500,000 in crypto assets due to a malicious Solidity Language extension for Cursor AI IDE. The fake extension, downloaded 54,000 times, appeared higher in search results than the legitimate one due to ranking algorithms. It installed malware that allowed remot…

heur:trojan-psw.msil.purelogs.gen

malicious extension

Published: July 16, 2025

Linked vulnerabilities : CVE-2024-3721

Downloadable IOCs: 0

Evolving Tactics of SLOW#TEMPEST: A Deep Dive Into Advanced Malware Techniques

In late 2024, a new variant of the SLOW#TEMPEST malware campaign was discovered, employing sophisticated obfuscation techniques. The malware is distributed as an ISO file containing multiple files, including a malicious loader DLL and a payload embedded in another DLL. The loader uses DLL side-load…

dll sideloading

dll side-loading

obfuscated function calls

cfg obfuscation

Published: July 16, 2025

Downloadable IOCs: 0

Patch, track, repeat

The report discusses the current state of vulnerability management, highlighting the increasing number of CVEs published daily and the rise in Known Exploited Vulnerabilities (KEVs). It emphasizes the importance of continuous tracking and patching of vulnerabilities. The report also covers Microsof…

microsoft patches

cybersecurity updates

vulnerability management

Published: July 11, 2025

Downloadable IOCs: 3

Attackers Inject Code into WordPress Theme to Redirect Visitors

An analysis reveals a recent attack vector targeting WordPress themes, specifically injecting malicious code into the footer.php file. The injected code uses a function called r2048 to retrieve a URL from a remote server and redirect visitors. This method is particularly insidious as it's not visib…

theme injection

file_get_contents

Published: July 11, 2025

Downloadable IOCs: 2

Click here to see more Attack Reports