Tag: 2025-08-19

6 Attack Reports | 39 Vulnerabilities

Attack reports

Noodlophile Stealer Evolves: Targeted Copyright Phishing Hits Enterprises with Social Media Footprints

The Noodlophile Stealer, first detailed in our previous analysis (New Noodlophile Stealer Distributes Via Fake AI Video Generation Platforms), has evolved into a highly targeted threat exploiting enterprises with significant Facebook footprints.
python
persistence
dll sideloading
telegram
morphisec
facebook
noodlophile
2025-08-19
select
ai video
web data
new noodlophile
spear
Published: August 19, 2025
Downloadable IOCs: 28

Ransomware incidents in Japan during the first half of 2025

The first half of 2025 saw a 1.4-fold increase in ransomware attacks in Japan compared to the previous year, with 68 confirmed cases. Small and medium-sized enterprises remained the primary targets, with manufacturing being the most affected industry. The ransomware group Qilin emerged as the most …
ransomware
encryption
double-extortion
manufacturing
japan
kawa4096
kawalocker
2025-08-19
kawalocker 2.0
salsa20
small-medium-enterprises
Published: August 19, 2025
Downloadable IOCs: 0

Salty 2FA: Undetected PhaaS Hitting US and EU Industries

A new Phishing-as-a-Service (PhaaS) framework dubbed Salty 2FA has been discovered targeting industries in the US and EU. It uses a unique domain pattern combining .com subdomains with .ru domains and employs a multi-stage execution chain to resist detection. The kit can bypass multiple 2FA methods…
phaas
2fa bypass
2025-08-19
salty 2fa
storm-1575
domain pattern
behavioral detection
multi-stage execution
Published: August 19, 2025
Downloadable IOCs: 0

Legitimate Chrome VPN Extension Turns to Browser Spyware

A popular Chrome VPN extension, FreeVPN.One, with over 100,000 installs has transformed into spyware. Initially legitimate, the extension began capturing screenshots of users' online activities and collecting sensitive information after an update in April 2025. The spyware operates covertly, automa…
spyware
vpn
data exfiltration
chrome extension
browser security
google web store
2025-08-19
screenshot capture
freevpn.one
user privacy
Published: August 19, 2025
Downloadable IOCs: 3

July 2025 APT Attack Trends Report (South Korea)

The report analyzes Advanced Persistent Threat (APT) attacks in South Korea during July 2025. Spear phishing was the primary attack method, with LNK files being the most common vector. Two types of LNK-based attacks were identified: Type A, which uses compressed CAB files containing malicious scrip…
apt
rat
rokrat
south korea
xenorat
lnk files
spear phishing
google drive
dropbox api
2025-08-19
Published: August 19, 2025
Downloadable IOCs: 0

Gh0st RAT-based GodRAT attacks financial organizations

A newly identified Remote Access Trojan named GodRAT, based on the Gh0st RAT codebase, has been targeting financial firms since September 2024. The attackers distribute malicious .scr files via Skype, using steganography to embed shellcode in images. GodRAT supports plugins and is used alongside br…
steganography
asyncrat
gh0st rat
financial-sector
2025-08-19
skype
password-stealer
awesomepuppet
ms edge password stealer
godrat
chrome password stealer
Published: August 19, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-50567

10.0
    Saurus
  • Saurus Cms
Published: August 19, 2025

CVE-2025-6758

9.8
    Wordpress
  • Real Spaces Properties Directory Theme
Published: August 19, 2025

CVE-2025-8723

9.8
    Cloudflare
  • Cloudflare Image Resizing
Published: August 19, 2025

CVE-2025-54336

9.8
    Plesk
  • Plesk Obsidian
Published: August 19, 2025

CVE-2025-8218

8.8
    Wordpress
  • Real Spaces Properties Directory Theme
Published: August 19, 2025

CVE-2025-7654

8.8
    Wordpress
  • Funnelkit
  • Funnelkit Automations
Published: August 19, 2025

CVE-2025-4046

8.5
    Lexmark
  • Cloud Services
Published: August 19, 2025

CVE-2025-4044

8.2
    Lexmark
  • Printer Driver
  • Printer
Published: August 19, 2025

CVE-2025-7670

7.5
    Wordpress
  • Js Archive List Plugin
Published: August 19, 2025

CVE-2025-41685

6.5
    Sunny
  • Sunny Portal
Published: August 19, 2025

CVE-2025-50461

6.5
    Volcengine
  • Verl
Published: August 19, 2025

CVE-2025-7496

6.4
    Wordpress
  • Wpc Smart Compare For Woocommerce
  • Wordpress
Published: August 19, 2025

CVE-2025-8622

6.4
    Wordpress
  • Flexible Map
Published: August 19, 2025

CVE-2025-8567

6.4
    Wordpress
  • Nexter Blocks
Published: August 19, 2025

CVE-2024-45062

6.4
    Openprinting
  • Ippusbxd
Published: August 19, 2025

CVE-2025-5417

6.1
    Red Hat
  • Developer Hub
  • Enterprise Linux
  • Container
Published: August 19, 2025

CVE-2025-41689

5.3
    *
  • *
Published: August 19, 2025

CVE-2025-9139

5.3
    Scada-Lts
  • Scada-Lts
Published: August 19, 2025

CVE-2025-43739

5.3
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: August 19, 2025

CVE-2025-9140

5.3
    Shanghai Lingdang Information Technology
  • Lingdang Crm
Published: August 19, 2025

CVE-2025-9137

5.1
    Scada-Lts
  • Scada-Lts
Published: August 19, 2025

CVE-2025-9138

5.1
    Scada-Lts
  • Scada-Lts
Published: August 19, 2025

CVE-2025-9134

4.8
    Aftership
  • Package Tracker App
Published: August 19, 2025

CVE-2025-9135

4.8
    Verkehrsauskunft Österreich
  • Smart Ride
  • Clevv Ver
  • Busbahn Bim
Published: August 19, 2025

CVE-2025-9136

4.8
    Libretro
  • Retroarch
Published: August 19, 2025

CVE-2025-43740

4.6
    Liferay
  • Liferay Portal
  • Liferay Dxp
Published: August 19, 2025

CVE-2025-8783

4.4
    Wordpress
  • Contact Manager
Published: August 19, 2025

CVE-2025-8357

4.3
    Wordpress
  • Media Library Assistant
Published: August 19, 2025

CVE-2025-4690

4.3
    Angular
  • Angularjs
Published: August 19, 2025

CVE-2025-57717

None
    Fortinet
  • Fortinet
Published: August 19, 2025

CVE-2025-57718

None
    Fortinet
  • *
Published: August 19, 2025

CVE-2025-57719

None
    Fortinet
  • Fortinet
Published: August 19, 2025

CVE-2025-57720

None
    Fortinet
  • Fortinet
Published: August 19, 2025

CVE-2025-57721

None
    Fortinet
  • Fortinet
Published: August 19, 2025

CVE-2025-57722

None
    Fortinet
  • *
Published: August 19, 2025

CVE-2025-57723

None
    Fortinet
  • Fortinet
Published: August 19, 2025

CVE-2025-57724

None
    Fortinet
  • Fortinet
Published: August 19, 2025

CVE-2025-57725

None
    Fortinet
  • Fortinet
Published: August 19, 2025

CVE-2025-38553

None
    Linux
  • Linux Kernel
Published: August 19, 2025
Click here to see more Vulnerabilities