Tag: 2025-08-20

7 Attack Reports | 127 Vulnerabilities

Attack reports

Behind the Curtain: How Lumma Affiliates Operate

This analysis reveals the complex operations of Lumma affiliates within a vast information-stealing ecosystem. Affiliates utilize various tools and services, including proxy networks, VPNs, anti-detect browsers, and crypting services. The investigation uncovered previously undocumented tools and sh…
infostealer
cybercrime
vidar
proxy
vpn
stealc
lumma
meduza stealer
affiliate
craxsrat
underground forums
2025-08-20
crypting
anti-detect browser
Published: August 20, 2025
Downloadable IOCs: 0

From SharePoint Vulnerability Exploit to Enterprise Ransomware

The Warlock ransomware group exploited unpatched Microsoft SharePoint servers to gain initial access and deploy ransomware across enterprise environments. The attack chain involved exploiting vulnerabilities, privilege escalation through Group Policy modification, credential theft using Mimikatz, l…
ransomware
lockbit
vulnerability
credential theft
dll sideloading
lateral movement
data exfiltration
CVE-2023-27532
lockbit 3.0
sharepoint
warlock
2025-08-20
Published: August 20, 2025
Downloadable IOCs: 0

Pressure on Ukraine and Poland Continues

Recent analysis reveals two clusters of malicious archives targeting Ukraine and Poland since April 2025, linked to UAC-0057 (also known as UNC1151, FrostyNeighbor or Ghostwriter). The infection chains aim to collect system information and deploy implants for further exploitation, using readily ava…
espionage
cobalt strike
ukraine
poland
infrastructure
c++
vba macros
downloaders
c#
2025-08-20
slack
xls
Published: August 20, 2025
Downloadable IOCs: 0

Paper Werewolf targets Russia with WinRAR zero-day vulnerability

A series of attacks by the Paper Werewolf (GOFFEE) cluster exploited vulnerabilities in WinRAR, including CVE-2025-6218 and a zero-day flaw. The threat actor used phishing emails impersonating Russian organizations, delivering malware through archive files. The attacks targeted Russian entities, ut…
phishing
zero-day
shellcode
c2
winrar
directory traversal
2025-08-20
rar
CVE-2025-6218
xpsrchvw74.exe
winrunapp.exe
Published: August 20, 2025
Downloadable IOCs: 0

CryptoJacking is dead: long live CryptoJacking

The article discusses the evolution of cryptojacking, from its rise with Coinhive in 2017 to its apparent decline and subsequent resurgence in a more sophisticated form. A new campaign was discovered involving over 3,500 infected websites, using stealthy techniques to mine cryptocurrency without de…
obfuscation
cryptojacking
monero
2025-08-20
webassembly
stealth mining
web workers
websockets
Published: August 20, 2025
Downloadable IOCs: 6

SOC files: an APT41 attack on government IT services in Africa

Kaspersky's MDR team detected a targeted attack by APT41 against government IT services in Africa. The attackers used Impacket tools, Cobalt Strike, and custom agents for lateral movement and data collection. They leveraged DLL sideloading techniques and publicly available tools like Mimikatz and R…
cobalt strike
government
dll sideloading
africa
credential harvesting
lateral movement
mimikatz
data exfiltration
web shell
sharepoint
targeted attack
2025-07-21
checkout
pillager
2025-08-20
Published: August 20, 2025
Downloadable IOCs: 0

Attacks Targeting Linux SSH Servers to Install SVF DDoS Bot

A recent attack on poorly managed Linux servers has been identified, involving the installation of SVF Botnet, a DDoS Bot malware developed in Python. The malware uses Discord as its C&C server and employs multiple proxy servers for DDoS attacks. The threat actor gains access through weak SSH crede…
linux
ddos
discord
ssh
brute force
dictionary attack
proxy servers
2025-08-20
svf bot
svf botnet
Published: August 20, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-48148

10.0
    Storekeeper B.V.
  • Storekeeper For Woocommerce
Published: August 20, 2025

CVE-2025-53577

10.0
    Thehp
  • Global Dns
Published: August 20, 2025

CVE-2025-48169

9.9
    Jordy Meow
  • Code Engine
Published: August 20, 2025

CVE-2025-53213

9.9
    Elex
  • Reachship Woocommerce Multi-Carrier And Conditional Shipping
Published: August 20, 2025

CVE-2025-53299

9.8
    Thememakers
  • Visual Content Composer
Published: August 20, 2025

CVE-2025-53580

9.8
    Quantumcloud
  • Simple Business Directory Pro
Published: August 20, 2025

CVE-2025-54014

9.8
    Quanticalabs
  • Medicenter Health Medical Clinic
Published: August 20, 2025

CVE-2025-49381

9.6
    Ads.Txt Guru
  • Ads.Txt Guru Connect
Published: August 20, 2025

CVE-2024-12223

9.3
    Prism
  • Central
Published: August 20, 2025

CVE-2025-9132

8.8
    Google
  • Chrome
Published: August 20, 2025

CVE-2025-8141

8.8
    Wordpress
  • Redirection For Contact Form 7
Published: August 20, 2025

CVE-2025-8145

8.8
    Wordpress
  • Redirection For Contact Form 7
Published: August 20, 2025

CVE-2025-48142

8.8
    Saad Iqbal
  • Bookify
Published: August 20, 2025

CVE-2025-48164

8.8
    Brainstorm Force
  • Suredash
Published: August 20, 2025

CVE-2025-48165

8.8
    Delucks
  • Delucks Seo
Published: August 20, 2025

CVE-2025-49382

8.8
    Dexignzone
  • Jobzilla
Published: August 20, 2025

CVE-2025-49399

8.8
    Basix
  • Nex-Forms
Published: August 20, 2025

CVE-2025-53560

8.8
    Rascals
  • Noisa
Published: August 20, 2025

CVE-2025-54007

8.8
    Pickplugins
  • Post Grid
  • Gutenberg Blocks
Published: August 20, 2025

CVE-2025-57790

8.7
    Commvault
  • Commvault
Published: August 20, 2025

CVE-2025-48158

8.6
    Alex Githatu
  • Buddypress Xprofile Custom Image Field
Published: August 20, 2025

CVE-2025-53194

8.5
    Crocoblock
  • Jetengine
Published: August 20, 2025

CVE-2025-48149

8.1
    Dedalx
  • Cook&Meal
Published: August 20, 2025

CVE-2025-48157

8.1
    Michele Giorgi
  • Formality
Published: August 20, 2025

CVE-2025-48160

8.1
    Cocobasic
  • Caliris
Published: August 20, 2025

CVE-2025-48171

8.1
    Thembay
  • Cena Store
Published: August 20, 2025

CVE-2025-53198

8.1
    Favethemes
  • Houzez
Published: August 20, 2025

CVE-2025-53204

8.1
    Ovatheme
  • Eventlist
Published: August 20, 2025

CVE-2025-53207

8.1
    Wp Travel
  • Wp Travel Gutenberg Blocks
Published: August 20, 2025

CVE-2025-53565

8.1
    Radiustheme
  • Widget For Google Reviews
Published: August 20, 2025

CVE-2025-53567

8.1
    Nk Ghost Kit
  • Ghost Kit
Published: August 20, 2025

CVE-2025-54031

8.1
    Support Board
  • Support Board
Published: August 20, 2025

CVE-2025-8289

7.5
    Wordpress
  • Redirection For Contact Form 7
Published: August 20, 2025

CVE-2025-30975

7.5
    Saifumak
  • Add Custom Codes
Published: August 20, 2025

CVE-2025-48298

7.5
    Benjamin Denis
  • Seopress
Published: August 20, 2025

CVE-2025-48302

7.5
    Roxnor
  • Fundengine
Published: August 20, 2025

CVE-2025-53208

7.5
    Paymayapg
  • Maya Business
Published: August 20, 2025

CVE-2025-53210

7.5
    Bdthemes
  • Zoloblocks
Published: August 20, 2025

CVE-2025-54017

7.5
    Cozmoslabs
  • Paid Member Subscriptions
Published: August 20, 2025

CVE-2025-54021

7.5
    Mitchell Bennis
  • Simple File List
Published: August 20, 2025

CVE-2025-54028

7.5
    Saleswonder
  • Cf7 Wow Styler
Published: August 20, 2025

CVE-2025-54034

7.5
    Tribulant Software
  • Newsletters
Published: August 20, 2025

CVE-2025-49438

7.2
    Max Chirkov
  • Simple Login Log
Published: August 20, 2025

CVE-2025-54012

7.2
    Nanbu
  • Welcart E-Commerce
Published: August 20, 2025

CVE-2025-28977

7.1
    Thimpress
  • Wp Pipes
Published: August 20, 2025

CVE-2025-48151

7.1
    Creativemindssolutions
  • Cm Map Locations
Published: August 20, 2025

CVE-2025-48152

7.1
    Dimafreund
  • Rentsyst
Published: August 20, 2025

CVE-2025-48154

7.1
    Lambertgroup
  • Multimedia Playlist Slider Addon
Published: August 20, 2025

CVE-2025-48159

7.1
    Lambertgroup
  • Youtube Vimeo Video Player And Slider Wp Plugin
Published: August 20, 2025

CVE-2025-48162

7.1
    Quantumcloud
  • Simple Business Directory Pro
Published: August 20, 2025

CVE-2025-48163

7.1
    Lambertgroup
  • Shout Html5 Radio Player With Ads
Published: August 20, 2025

CVE-2025-48168

7.1
    Lambertgroup
  • Apollo Sticky Full Width Html5 Audio Player
Published: August 20, 2025

CVE-2025-48170

7.1
    Lambertgroup
  • Universal Video Player
Published: August 20, 2025

CVE-2025-48296

7.1
    Skygroup
  • Upstore
Published: August 20, 2025

CVE-2025-48297

7.1
    Quantumcloud
  • Simple Link Directory
Published: August 20, 2025

CVE-2025-53201

7.1
    Nootheme
  • Jobmonster
Published: August 20, 2025

CVE-2025-53205

7.1
    Lambertgroup
  • Radio Player Shoutcast And Icecast
Published: August 20, 2025

CVE-2025-53212

7.1
    Lambertgroup
  • Revolution Video Player With Bottom Playlist
Published: August 20, 2025

CVE-2025-53226

7.1
    Digitalzoomstudio
  • Comments Capcha Box
Published: August 20, 2025

CVE-2025-53319

7.1
    Raptive
  • Raptive Ads
Published: August 20, 2025

CVE-2025-53559

7.1
    Lambertgroup
  • Universal Video Player
    Wpbakery
Published: August 20, 2025

CVE-2025-53562

7.1
    Lambergtgroup
  • Universal Video Player Addon For Wpbakery Page Builder
Published: August 20, 2025

CVE-2025-53563

7.1
    Lambertgroup
  • Youtube Vimeo Video Player And Slider
Published: August 20, 2025

CVE-2025-53564

7.1
    Lambertgroup
  • Html5 Radio Player Wpbakery Page Builder Addon
Published: August 20, 2025

CVE-2025-54027

7.1
    Schiocco
  • Support Board
Published: August 20, 2025

CVE-2025-54032

7.1
    Webcodingplace
  • Real Estate Manager Pro
Published: August 20, 2025

CVE-2025-54363

6.9
    Microsoft
  • Knack
Published: August 20, 2025

CVE-2025-54364

6.9
    Microsoft
  • Knack
Published: August 20, 2025

CVE-2025-57788

6.9
    Commvault
  • Commvault
Published: August 20, 2025

CVE-2025-57791

6.9
    Commvault
  • Commvault
Published: August 20, 2025

CVE-2025-53522

6.9
    Six Apart
  • Movable Type
Published: August 20, 2025

CVE-2025-47650

6.5
    Infility
  • Infility Global
Published: August 20, 2025

CVE-2025-49389

6.5
    Wen Solutions
  • Notice Bar
Published: August 20, 2025

CVE-2025-49395

6.5
    Themify
  • Themify Icons
Published: August 20, 2025

CVE-2025-49397

6.5
    Noor Alam
  • Colorbox Lightbox
Published: August 20, 2025

CVE-2025-49400

6.5
    Osama.Esh
  • Wp Visitor Statistics
Published: August 20, 2025

CVE-2025-49410

6.5
    Imran Emu
  • Tc Testimonials
Published: August 20, 2025

CVE-2025-49411

6.5
    Vikas Sharma
  • Iframe Block
Published: August 20, 2025

CVE-2025-49420

6.5
    Pierre-Henri Lavigne
  • Markup Markdown
Published: August 20, 2025

CVE-2025-49422

6.5
    Aelora
  • Iframe Wrapper
Published: August 20, 2025

CVE-2025-49424

6.5
    Diego.Benna
  • Essential Doocomponents For Visual Composer
Published: August 20, 2025

CVE-2025-49436

6.5
    Thiudis
  • Custom Menu
Published: August 20, 2025

CVE-2025-49893

6.5
    Liseperu
  • Elizaibots
Published: August 20, 2025

CVE-2025-53195

6.5
    Crocoblock
  • Jetengine
Published: August 20, 2025

CVE-2025-53196

6.5
    Crocoblock
  • Jetengine
Published: August 20, 2025

CVE-2025-53561

6.5
    Miniorange
  • Prevent Files Folders Access
Published: August 20, 2025

CVE-2025-53983

6.5
    Crocoblock
  • Jetelements
Published: August 20, 2025

CVE-2025-53985

6.5
    Crocoblock
  • Jettabs
Published: August 20, 2025

CVE-2025-53987

6.5
    Crocoblock
  • Jetmenu
Published: August 20, 2025

CVE-2025-53988

6.5
    Crocoblock
  • Jetblocks For Elementor
Published: August 20, 2025

CVE-2025-53992

6.5
    Crocoblock
  • Jettricks
Published: August 20, 2025

CVE-2025-53993

6.5
    Crocoblock
  • Jetpopup
Published: August 20, 2025

CVE-2025-53998

6.5
    Crocoblock
  • Jetwoobuilder
Published: August 20, 2025

CVE-2025-54008

6.5
    Crocoblock
  • Jetsmartfilters
Published: August 20, 2025

CVE-2025-54019

6.5
    Bearsthemes
  • Alone
Published: August 20, 2025

CVE-2025-54025

6.5
    Relywp
  • Coupon Affiliates
Published: August 20, 2025

CVE-2025-8618

6.4
    Wordpress
  • Wpc Smart Quick View
Published: August 20, 2025

CVE-2025-49392

5.9
    Themify
  • Audio Dock
Published: August 20, 2025

CVE-2025-49409

5.9
    Brewlabs
  • Sensorpress
Published: August 20, 2025

CVE-2025-49412

5.9
    Numixtech
  • Page Transition
Published: August 20, 2025

CVE-2025-49413

5.9
    Wishloop
  • Terms Of Service Privacy Policy Generator
Published: August 20, 2025

CVE-2025-49428

5.9
    Dourou
  • Cookie Warning
Published: August 20, 2025

CVE-2025-49434

5.9
    Laposta
  • Woocommerce
Published: August 20, 2025

CVE-2025-49889

5.9
    Imaprogrammer
  • Custom Comment
Published: August 20, 2025

CVE-2025-49890

5.9
    Jorge Garcia De Bustos
  • Awstats Script
Published: August 20, 2025

CVE-2025-49891

5.9
    Riotweb
  • Contact Info Widget
Published: August 20, 2025

CVE-2025-49892

5.9
    Badasswp
  • Pending Order Bot
Published: August 20, 2025

CVE-2025-49894

5.9
    Rewish
  • Wp Emmet
Published: August 20, 2025

CVE-2025-57789

5.3
    Commvault
  • Commvault
Published: August 20, 2025

CVE-2025-54551

5.3
    Synapse
  • Synapse Mobility
Published: August 20, 2025

CVE-2025-49406

5.3
    Favethemes
  • Houzez
Published: August 20, 2025

CVE-2025-9193

5.1
    Totvs
  • Portal Meu Rh
Published: August 20, 2025

CVE-2025-55706

5.1
    Movable Type
  • Movable Type
Published: August 20, 2025

CVE-2025-49408

4.9
    Wpdeveloper
  • Templately
Published: August 20, 2025

CVE-2025-9176

4.8
    Neurobin
  • Shc
Published: August 20, 2025

CVE-2025-9202

4.3
    Wordpress
  • Colormag
Published: August 20, 2025

CVE-2025-49391

4.3
    Fetch Designs
  • Sign-Up Sheets
Published: August 20, 2025

CVE-2025-49396

4.3
    Themify
  • Themify Builder
Published: August 20, 2025

CVE-2025-49426

4.3
    Dourou
  • Cookie Warning
Published: August 20, 2025

CVE-2025-49896

4.3
    Wptasker
  • Wp Discord Post Plus
Published: August 20, 2025

CVE-2025-57742

None
    Fortinet
  • Fortinet
Published: August 20, 2025

CVE-2025-57743

None
    Fortinet
  • Fortinet
Published: August 20, 2025

CVE-2025-57744

None
    Fortinet
  • Fortinet
Published: August 20, 2025

CVE-2025-57745

None
    Fortinet
  • Fortinet
Published: August 20, 2025

CVE-2025-57746

None
    Fortinet
  • *
Published: August 20, 2025

CVE-2025-57747

None
    Fortinet
  • Fortinet
Published: August 20, 2025

CVE-2025-57748

None
    Fortinet
  • Fortinet
Published: August 20, 2025
Click here to see more Vulnerabilities