Tag: 2025-08-15

8 Attack Reports | 103 Vulnerabilities

Attack reports

Threat Actor Profile: Interlock Ransomware

Interlock, a relatively new ransomware group first observed in September 2024, has gained prominence in 2025 as an opportunistic ransomware operator. Unlike traditional Ransomware-as-a-Service models, Interlock operates without affiliates or public advertisements. The group conducts double extortio…
social engineering
ransomware
powershell
cobalt strike
clickfix
systembc
double extortion
trycloudflare
remote access trojan
compromised websites
interlock rat
2025-08-15
nodesnake rat
Published: August 15, 2025
Downloadable IOCs: 24

The Hidden Infrastructure Behind VexTrio's TDS

This report provides an in-depth analysis of VexTrio's traffic distribution system (TDS) infrastructure. It reveals their use of resilient, fault-tolerant systems spread across multiple hosting providers and data centers. Key components include DevOps tools like Terraform and Kubernetes, tracking s…
infrastructure
adtech
cloaking
content delivery network
traffic distribution system
2025-08-15
tracking
binom
devops
Published: August 15, 2025
Downloadable IOCs: 0

'Blue Locker' Analysis: Ransomware Targeting Oil & Gas Sector in Pakistan

A new ransomware strain called 'Blue Locker' is targeting Pakistan's oil and gas sector, particularly affecting Pakistan Petroleum Limited. The National Cyber Emergency Response Team (NCERT) has issued warnings to 39 key ministries and institutions about this severe threat. The ransomware, which sh…
phishing
ransomware
pakistan
encryption
cybersecurity
2025-08-15
oil and gas
ncert
proton
shinra
blue locker
Published: August 15, 2025
Downloadable IOCs: 0

CrossC2 Expanding Cobalt Strike Beacon to Cross-Platform Attacks

From September to December 2024, incidents involving CrossC2, an extension tool for Cobalt Strike Beacon on Linux, were confirmed. The attacker used CrossC2 along with other tools like PsExec, Plink, and Cobalt Strike to penetrate AD. A custom malware called ReadNimeLoader was used as a loader for …
linux
cobalt strike
macos
systembc
psexec
2025-08-15
readnimeloader
crossc2
ad
odinldr
Published: August 15, 2025
Downloadable IOCs: 0

This 'SAP Ariba Quote' Isn't What It Seems—It's Ransomware

A sophisticated ransomware campaign has been uncovered, masquerading as a new SAP Ariba tool. The attack uses email lures, sender spoofing, and impersonation of legitimate software vendors to deliver LeeMe Ransomware. The malware employs SAP branding, a fake GUI, and a Portuguese ransom note. It ta…
phishing
social engineering
ransomware
encryption
bitcoin
keylogger
data exfiltration
2025-08-15
sap ariba
leeme ransomware
Published: August 15, 2025
Downloadable IOCs: 0

Threat Bulletin: Fire in the Woods – A New Variant of FireWood

A new, low-detected variant of the FireWood Linux backdoor has been discovered, showing changes in implementation and configuration while maintaining core functionality. This backdoor, linked to the 'Project Wood' malware lineage, operates as a remote access trojan on Linux systems, using kernel-le…
linux
backdoor
rat
kernel rootkit
project wood
firewood
2025-08-15
tea encryption
Published: August 15, 2025
Downloadable IOCs: 0

ERMAC V3.0 Banking Trojan: Full Source Code Leak and Infrastructure Analysis

The complete source code for ERMAC V3.0, an advanced banking trojan, was discovered and analyzed, providing rare insight into this active Malware-as-a-Service platform. ERMAC has evolved to target over 700 financial and cryptocurrency apps, employing sophisticated form injection techniques and encr…
malware-as-a-service
banking trojan
infrastructure analysis
hook
ermac
android malware
cerberus
2025-08-15
exfiltration server
c2 backend
source code leak
encrypted communications
form injection
Published: August 15, 2025
Downloadable IOCs: 0

Kawabunga, Dude, You've Been Ransomed!

A new ransomware variant called KawaLocker (KAWA4096) was recently observed in an attack. The threat actor gained initial access via RDP using a compromised account and employed various tools to disable security measures. HRSword, a monitoring tool, was deployed along with kernel drivers sysdiag.sy…
ransomware
encryption
rdp
psexec
kawa4096
2025-08-15
hrsword
kawalocker
Published: August 15, 2025
Downloadable IOCs: 5
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-6679

9.8
    Wordpress
  • Bit Form Builder
Published: August 15, 2025

CVE-2025-7778

9.8
    Wordpress
  • Plugin
    Icons Factory
Published: August 15, 2025

CVE-2025-8995

9.8
    Drupal
  • Authenticator Login
Published: August 15, 2025

CVE-2025-54473

9.2
    Joomla
  • Phoca Commander
Published: August 15, 2025

CVE-2025-9060

9.1
    Msoft
  • Mflash
Published: August 15, 2025

CVE-2025-54475

8.7
    Joomla
  • Js Jobs
Published: August 15, 2025

CVE-2025-54474

8.5
    Joomla
  • Dj-Classifieds
Published: August 15, 2025

CVE-2025-49897

8.5
    Gopiplus
  • Vertical Scroll Slideshow Gallery
Published: August 15, 2025

CVE-2025-8342

8.1
    Woocommerce
  • Otp Login With Phone Number
Published: August 15, 2025

CVE-2025-5046

7.8
    Autodesk
  • Autocad
Published: August 15, 2025

CVE-2025-5047

7.8
    Autodesk
  • Autocad
Published: August 15, 2025

CVE-2025-5048

7.8
    Autodesk
  • Autocad
Published: August 15, 2025

CVE-2025-8092

7.6
    Drupal
  • Cookies Consent Management
Published: August 15, 2025

CVE-2025-8361

7.6
    Drupal
  • Drupal
Published: August 15, 2025

CVE-2025-6025

7.5
    Woocommerce
  • Order Tip
Published: August 15, 2025

CVE-2025-7641

7.5
    Wordpress
  • Nextgen Gallery
Published: August 15, 2025

CVE-2025-7650

7.5
    Bizcalendar
  • Bizcalendar Web Plugin
Published: August 15, 2025

CVE-2025-8959

7.5
    Hashicorp
  • Go-Getter
Published: August 15, 2025

CVE-2025-9006

7.4
    Tenda
  • Ch22
Published: August 15, 2025

CVE-2025-9007

7.4
    Tenda
  • Ch22
Published: August 15, 2025

CVE-2025-9023

7.4
    Tenda
  • Ac7
  • Ac18
Published: August 15, 2025

CVE-2025-9046

7.4
    Tenda
  • Ac20
Published: August 15, 2025

CVE-2025-9000

7.3
    Mechrevo
  • Control Center Gx V2
Published: August 15, 2025

CVE-2025-9016

7.3
    Mechrevo
  • Control Center Gx
Published: August 15, 2025

CVE-2025-1929

7.2
    Risk Yazilim Teknolojileri Ltd Sti
  • Reel Sektor Hazine Ve Risk Yonetimi Yazilimi
Published: August 15, 2025

CVE-2025-24975

7.1
    Firebird
  • Firebird
Published: August 15, 2025

CVE-2025-8989

6.9
    Sourcecodester
  • Covid 19 Testing Management System
Published: August 15, 2025

CVE-2025-8990

6.9
    Code-Projects
  • Online Medicine Guide
Published: August 15, 2025

CVE-2025-8993

6.9
    Itsourcecode
  • Online Tour Travel Management System
Published: August 15, 2025

CVE-2025-9002

6.9
    Surbowl
  • Dormitory-Management-Php
Published: August 15, 2025

CVE-2025-9008

6.9
    Itsourcecode
  • Online Tour And Travel Management System
Published: August 15, 2025

CVE-2025-9009

6.9
    Itsourcecode
  • Online Tour And Travel Management System
Published: August 15, 2025

CVE-2025-9010

6.9
    Itsourcecode
  • Online Tour And Travel Management System
Published: August 15, 2025

CVE-2025-9011

6.9
    Phpgurukul
  • Online Shopping Portal
Published: August 15, 2025

CVE-2025-9012

6.9
    Phpgurukul
  • Online Shopping Portal
Published: August 15, 2025

CVE-2025-9013

6.9
    Phpgurukul
  • Online Shopping Portal
Published: August 15, 2025

CVE-2025-9021

6.9
    Sourcecodester
  • Online Bank Management System
Published: August 15, 2025

CVE-2025-9022

6.9
    Sourcecodester
  • Online Bank Management System
Published: August 15, 2025

CVE-2025-9024

6.9
    Phpgurukul
  • Beauty Parlour Management System
Published: August 15, 2025

CVE-2025-9026

6.9
    D-Link
  • Dir-860l
Published: August 15, 2025

CVE-2025-9027

6.9
    Code-Projects
  • Online Medicine Guide
Published: August 15, 2025

CVE-2025-9028

6.9
    Code-Projects
  • Online Medicine Guide
Published: August 15, 2025

CVE-2025-9047

6.9
    Projectworlds
  • Visitor Management System
Published: August 15, 2025

CVE-2025-9050

6.9
    Projectworlds
  • Travel Management System
Published: August 15, 2025

CVE-2025-9051

6.9
    Projectworlds
  • Travel Management System
Published: August 15, 2025

CVE-2025-9052

6.9
    Projectworlds
  • Travel Management System
Published: August 15, 2025

CVE-2025-9053

6.9
    Projectworlds
  • Travel Management System
Published: August 15, 2025

CVE-2025-7961

6.9
    Wulkano
  • Kap
Published: August 15, 2025

CVE-2025-7662

6.5
    Wordpress
  • Gestion De Tarifs
Published: August 15, 2025

CVE-2025-8867

6.4
    Graphina
  • Elementor Charts And Graphs
Published: August 15, 2025

CVE-2025-8451

6.4
    Elementor
  • Essential Addons For Elementor
Published: August 15, 2025

CVE-2025-8604

6.4
    Wp Table Builder
  • Wp Table Builder
Published: August 15, 2025

CVE-2025-5844

6.4
    Wordpress
  • Radius Blocks Plugin
Published: August 15, 2025

CVE-2025-7507

6.4
    Wordpress
  • Elink
Published: August 15, 2025

CVE-2025-8720

6.4
    Wordpress
  • Plugin
Published: August 15, 2025

CVE-2025-9004

6.3
    Mtons
  • Mblog
Published: August 15, 2025

CVE-2025-9005

6.3
    Mtons
  • Mblog
Published: August 15, 2025

CVE-2025-8905

6.3
    Wordpress
  • Inpersttion For Theme
Published: August 15, 2025

CVE-2025-54466

6.3
    Apache
  • Ofbiz
Published: August 15, 2025

CVE-2025-7688

6.1
    Wordpress
  • Add User Meta
Published: August 15, 2025

CVE-2025-49898

5.9
    Xolluteon
  • Dropshix
Published: August 15, 2025

CVE-2025-26709

5.7
    Zte
  • F50
Published: August 15, 2025

CVE-2025-9001

5.5
    Lemonos
  • Lemonos
Published: August 15, 2025

CVE-2025-55207

5.5
    Astro
  • Astro
Published: August 15, 2025

CVE-2025-55203

5.4
    Plane
  • Plane
Published: August 15, 2025

CVE-2025-36088

5.4
    Ibm
  • Ts4500
Published: August 15, 2025

CVE-2025-8991

5.3
    Linlinjava
  • Litemall
Published: August 15, 2025

CVE-2025-8992

5.3
    Mtons
  • Mblog
Published: August 15, 2025

CVE-2025-9017

5.3
    Phpgurukul
  • Zoo Management System
Published: August 15, 2025

CVE-2025-9025

5.3
    Code-Projects
  • Simple Cafe Ordering System
Published: August 15, 2025

CVE-2025-54989

5.3
    Firebird
  • Firebird
Published: August 15, 2025

CVE-2025-49432

5.3
    Fwdesign
  • Ultimate Video Player
Published: August 15, 2025

CVE-2025-52619

5.3
    Hcl
  • Hcl Bigfix
Published: August 15, 2025

CVE-2025-52621

5.3
    Hcl
  • Bigfix
Published: August 15, 2025

CVE-2025-9003

5.1
    D-Link
  • Dir-818lw
Published: August 15, 2025

CVE-2025-8066

4.8
    Bunkerity
  • Bunker Web
Published: August 15, 2025

CVE-2025-43490

4.8
    Hp
  • Hotkey Support
  • Hpaudioanalytics
Published: August 15, 2025

CVE-2025-8675

4.7
    Drupal
  • Ai Seo Link Advisor
Published: August 15, 2025

CVE-2025-8080

4.4
    Wordpress
  • Alobaidi Captcha
Published: August 15, 2025

CVE-2025-8676

4.3
    Wordpress
  • B Slider
Published: August 15, 2025

CVE-2025-8680

4.3
    Wordpress
  • B Slider
Published: August 15, 2025

CVE-2025-8091

4.3
    Wordpress
  • Eventon Lite
Published: August 15, 2025

CVE-2025-8362

4.3
    Drupal
  • Google Tag Manager
Published: August 15, 2025

CVE-2025-8996

4.3
    Drupal
  • Layout Builder Advanced Permissions
Published: August 15, 2025

CVE-2025-52618

4.3
    Hcl
  • Hcl Bigfix
Published: August 15, 2025

CVE-2025-52620

4.3
    Hcl
  • Hcl Bigfix
Published: August 15, 2025

CVE-2025-8013

3.8
    Quttera
  • Quttera Web Malware Scanner
Published: August 15, 2025

CVE-2025-31961

3.7
    Hcl
  • Hcl Connections
Published: August 15, 2025

CVE-2025-55285

2.6
    Backstage
  • Plugin Scaffolder Backend
Published: August 15, 2025

CVE-2025-9019

2.3
    Tcpreplay
  • Tcpreplay
Published: August 15, 2025

CVE-2025-9020

2.0
    Px4
  • Px4-Autopilot
Published: August 15, 2025

CVE-2025-55718

None
    Fortinet
  • Fortigate
Published: August 15, 2025

CVE-2025-55719

None
    Fortinet
  • *
Published: August 15, 2025

CVE-2025-55720

None
    Fortinet
  • Fortinet
Published: August 15, 2025

CVE-2025-55721

None
    Fortinet
  • Fortinet
Published: August 15, 2025

CVE-2025-55722

None
    Fortinet
  • Fortinet
Published: August 15, 2025

CVE-2025-55723

None
    Fortinet
  • *
Published: August 15, 2025

CVE-2025-55724

None
    Fortinet
  • Fortinet
Published: August 15, 2025

CVE-2025-55725

None
    Fortinet
  • Fortinet
Published: August 15, 2025

CVE-2025-55726

None
    Fortinet
  • Fortinet
Published: August 15, 2025

CVE-2024-12573

None
    Wordpress
  • Wordpress
Published: August 15, 2025

CVE-2025-44201

None
Published: August 15, 2025

CVE-2025-43201

None
    Apple
  • Apple Music Classical
Published: August 15, 2025
Click here to see more Vulnerabilities