Tag: 2025-09-01

7 Attack Reports | 63 Vulnerabilities

Attack reports

Traps Beneath Fault Repair: Analysis of Recent Attacks Using ClickFix Technique

Lazarus, an APT group with suspected East Asian origins, has recently employed the ClickFix social engineering technique in their phishing attacks. The group, known for targeting financial institutions and cryptocurrency exchanges, now uses fake job opportunities to lure victims to interview websit…
phishing
social engineering
windows
macos
node.js
clickfix
beavertail
invisibleferret
2025-09-01
apt-q-1
Published: September 1, 2025
Downloadable IOCs: 18

Analysis of APT-C-53 (Gamaredon) Attack on Ukrainian Government Agencies

APT-C-53, also known as Gamaredon, is a Russian state-sponsored threat group active since 2013, targeting Ukrainian government and military entities. The group has upgraded its attack techniques, focusing on dynamic cloud-based C2 infrastructure and targeted delivery of cloud storage tools. In 2025…
apt
dropbox
powershell
russia
ukraine
cyberespionage
vbscript
2025-09-01
cloudflareworkers
devtunnels
Published: September 1, 2025
Downloadable IOCs: 11

Amazon disrupts watering hole campaign by Russia's APT29

Amazon's threat intelligence team has uncovered and disrupted a watering hole campaign conducted by APT29, a Russian threat actor. The campaign involved compromising legitimate websites to redirect visitors to malicious infrastructure, tricking users into authorizing attacker-controlled devices thr…
russia
credential harvesting
watering hole
javascript injection
svr
2025-09-01
infrastructure adaptation
device authentication
Published: September 1, 2025
Downloadable IOCs: 2

TINKYWINKEY KEYLOGGER

TinkyWinkey is a sophisticated Windows-based keylogger that combines persistent service execution, low-level keyboard hooks, and comprehensive system profiling. It captures all keystrokes, including special keys and multi-language input, alongside detailed system metrics such as CPU, memory, OS ver…
windows
persistence
service
keylogger
stealth
dll injection
2025-09-01
system profiling
tinkywinkey
Published: September 1, 2025
Downloadable IOCs: 3

AI Waifu RAT: A Ring3 malware-like RAT based on LLM manipulation is circulating in the wild

A niche LLM role-playing community is being targeted by a sophisticated social engineering attack disguised as an AI character enhancement tool. The 'AI Waifu RAT' is a Remote Access Trojan marketed as a feature allowing AI characters to interact with users' computers. The RAT, distributed under th…
backdoor
rat
social engineering
ai
llm
code execution
threat actor
ctf
2025-09-01
ai waifu rat
Published: September 1, 2025
Downloadable IOCs: 7

Warning About NightSpire Ransomware Following Cases of Damage in South Korea

NightSpire, a ransomware group active since February 2025, employs an aggressive strategy and specialized infrastructure similar to Ransomware-as-a-Service models. They operate a Dedicated Leak Site, posting victim information and countdown timers for data release. Using highly threatening language…
ransomware
encryption
south korea
double-extortion
nightspire
rsa
2025-08-29
2025-09-01
aes
cyber extortion
dedicated leak site
Published: September 1, 2025
Downloadable IOCs: 2

A look at PolarEdge Adjacent Infrastructure

This analysis examines the infrastructure associated with PolarEdge, an IoT botnet that exploits CVE-2023-20118. The investigation reveals connections between various certificates and services, including a WebRTC e-book certificate and suspicious PolarSSL certificates. A key discovery is the RPX se…
infrastructure
socks5
polaredge
CVE-2023-20118
2025-09-01
certificate analysis
proxy management
trojan-protocol
reverse-connect
iot botnet
rpx server
Published: September 1, 2025
Linked vulnerabilities : CVE-2023-20118
Downloadable IOCs: 4
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-6507

9.8
    H2oai
  • H2o-3
Published: September 1, 2025

CVE-2022-38692

9.8
    Unisoc
  • Bootrom
Published: September 1, 2025

CVE-2022-38693

9.8
    Unisoc
  • Fdl1
Published: September 1, 2025

CVE-2022-38696

9.8
    Unisoc
  • Bootrom
Published: September 1, 2025

CVE-2025-54857

9.3
    Skybridge
  • Basic
Published: September 1, 2025

CVE-2025-20704

8.8
    Mediatek
  • Modem
Published: September 1, 2025

CVE-2025-0610

8.6
    Akinsoft
  • Qr Menü
Published: September 1, 2025

CVE-2025-2412

8.6
    Akinsoft
  • Qr Menu
Published: September 1, 2025

CVE-2025-20708

8.1
    Mediatek
  • Modem
Published: September 1, 2025

CVE-2025-20705

7.8
    Mediatek
  • *
Published: September 1, 2025

CVE-2025-20706

7.8
    Mediatek
  • Mbrain
Published: September 1, 2025

CVE-2022-38691

7.8
    Unisoc
  • Bootrom
Published: September 1, 2025

CVE-2022-38694

7.8
    Unisoc
  • Bootrom
Published: September 1, 2025

CVE-2022-38695

7.8
    Unisoc
  • Bootrom
Published: September 1, 2025

CVE-2025-7731

7.5
    Mitsubishi Electric
  • Melsec Iq-F Series
Published: September 1, 2025

CVE-2025-20703

7.5
    Mediatek
  • Modem
Published: September 1, 2025

CVE-2025-9779

7.4
    Totolink
  • A702r
Published: September 1, 2025

CVE-2025-9780

7.4
    Totolink
  • A702r
Published: September 1, 2025

CVE-2025-9781

7.4
    Totolink
  • A702r
Published: September 1, 2025

CVE-2025-9782

7.4
    Totolink
  • A702r
Published: September 1, 2025

CVE-2025-9783

7.4
    Totolink
  • A702r
Published: September 1, 2025

CVE-2025-7405

7.3
    Mitsubishi Electric
  • Melsec Iq-F Series Cpu Module
Published: September 1, 2025

CVE-2024-12925

7.3
    Akinsoft
  • Qr Menu
Published: September 1, 2025

CVE-2025-9751

6.9
    Campcodes
  • Online Learning Management System
Published: September 1, 2025

CVE-2025-9752

6.9
    D-Link
  • Dir-852
Published: September 1, 2025

CVE-2025-9757

6.9
    Campcodes
  • Sourcecodester Courier Management System
Published: September 1, 2025

CVE-2025-9570

6.9
    Sunnet
  • Ehrd Ctms
Published: September 1, 2025

CVE-2025-9759

6.9
    Campcodes
  • Sourcecodester Courier Management System
Published: September 1, 2025

CVE-2025-9761

6.9
    Campcodes
  • Online Feeds Product Inventory System
Published: September 1, 2025

CVE-2025-9763

6.9
    Campcodes
  • Online Learning Management System
Published: September 1, 2025

CVE-2025-9764

6.9
    Itsourcecode
  • Sports Management System
Published: September 1, 2025

CVE-2025-9765

6.9
    Itsourcecode
  • Sports Management System
Published: September 1, 2025

CVE-2025-9766

6.9
    Itsourcecode
  • Sports Management System
Published: September 1, 2025

CVE-2025-9767

6.9
    Itsourcecode
  • Sports Management System
Published: September 1, 2025

CVE-2025-9770

6.9
    Campcodes
  • Hospital Management System
Published: September 1, 2025

CVE-2025-9771

6.9
    Sourcecodester
  • Eye Clinic Management System
Published: September 1, 2025

CVE-2025-9772

6.9
    Remoteclinic
  • Remoteclinic
Published: September 1, 2025

CVE-2025-9775

6.9
    Remoteclinic
  • Remoteclinic
Published: September 1, 2025

CVE-2025-20707

6.7
    Mediatek
  • Geniezone
Published: September 1, 2025

CVE-2024-12924

6.3
    Akinsoft
  • Qr Menue
Published: September 1, 2025

CVE-2025-0656

6.1
    Ibm
  • Concert Software
Published: September 1, 2025

CVE-2025-36133

5.9
    Ibm
  • App Connect Enterprise
Published: September 1, 2025

CVE-2025-33084

5.9
    Ibm
  • Concert Software
Published: September 1, 2025

CVE-2025-33099

5.9
    Ibm
  • Concert Software
Published: September 1, 2025

CVE-2025-33102

5.9
    Ibm
  • Concert Software
Published: September 1, 2025

CVE-2025-58318

5.8
    Delta Electronics
  • Diaview
Published: September 1, 2025

CVE-2025-33082

5.4
    Ibm
  • Concert Software
Published: September 1, 2025

CVE-2025-33083

5.4
    Ibm
  • Concert Software
Published: September 1, 2025

CVE-2025-9755

5.3
    Khanakag
  • Khanakag-17
Published: September 1, 2025

CVE-2025-9756

5.3
    Phpgurukul
  • User Management System
Published: September 1, 2025

CVE-2025-9758

5.3
    Deepakmisal24
  • Chemical Inventory Management System
Published: September 1, 2025

CVE-2025-9760

5.3
    Portabilis
  • I-Educar
Published: September 1, 2025

CVE-2025-9768

5.3
    Itsourcecode
  • Sports Management System
Published: September 1, 2025

CVE-2025-9773

5.3
    Remoteclinic
  • Remoteclinic
Published: September 1, 2025

CVE-2025-9754

5.1
    Campcodes
  • Online Hospital Management System
Published: September 1, 2025

CVE-2025-9567

5.1
    Sunnet
  • Ehrd
Published: September 1, 2025

CVE-2025-9568

5.1
    Sunnet
  • Ehrd
Published: September 1, 2025

CVE-2025-9569

5.1
    Sunnet
  • Ehrd
Published: September 1, 2025

CVE-2025-9753

4.8
    Campcodes
  • Online Hospital Management System
Published: September 1, 2025

CVE-2024-12914

4.3
    Akinsoft
  • Qr Menu
Published: September 1, 2025

CVE-2025-9769

2.4
    D-Link
  • Di-7400g+
Published: September 1, 2025

CVE-2025-9774

2.1
    Remoteclinic
  • Remoteclinic
Published: September 1, 2025

CVE-2025-9778

1.8
    Tenda
  • W12
Published: September 1, 2025
Click here to see more Vulnerabilities