Tag: 2025-11-09

3 Attack Reports | 7 Vulnerabilities

Attack reports

Watch out for SVG files booby-trapped with malware

A recent malware campaign in Latin America demonstrates cybercriminals' evolving tactics. The attacks use social engineering, sending emails that appear to be from trusted institutions with urgent warnings about legal issues. The campaign's goal is to install AsyncRAT, a remote access trojan that a…
social engineering
asyncrat
dll sideloading
latin america
svg
colombia
2025-11-09
ai-generated templates
judicial system impersonation
Published: November 9, 2025
Downloadable IOCs: 0

From primitive crypto theft to sophisticated AI-based deception

The North Korea-aligned threat actor DeceptiveDevelopment employs social engineering tactics to target software developers, especially those in cryptocurrency and Web3 projects. They use fake job offers and trojanized code challenges to deliver malware like BeaverTail and InvisibleFerret. The group…
malware
social engineering
north korea
cryptocurrency
remote access
information theft
beavertail
identity theft
invisibleferret
ottercookie
job scams
tropidoor
multiplatform
2025-09-25
weaselstore
postnaptea
tsunamikit
job offers
akdoortea
2025-11-09
it worker fraud
ai-based deception
Published: November 9, 2025
Downloadable IOCs: 1

Gotta fly: Targeting the UAV sector

ESET researchers have uncovered a new instance of Operation DreamJob, a cyberespionage campaign attributed to the North Korea-aligned Lazarus group. The attackers targeted European companies in the defense industry, particularly those involved in unmanned aerial vehicle (UAV) technology. The campai…
social engineering
north korea
cyberespionage
defense industry
trojanized software
scoringmathtea
quanpinloader
operation dreamjob
2025-11-09
uav
binmergeloader
Published: November 9, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-12919

6.3
    Eshop
  • Ever Shop
Published: November 9, 2025

CVE-2025-12916

5.3
    Sangfor
  • Operation And Maintenance Security Management System
Published: November 9, 2025

CVE-2025-12917

5.3
    Tozed
  • Zlt T10
  • Zlt T10plus
Published: November 9, 2025

CVE-2025-12920

4.8
    Qianfox
  • Foxcms
Published: November 9, 2025

CVE-2025-12918

2.3
    Yungifez
  • Skuul School Management System
Published: November 9, 2025

CVE-2025-40108

None
    Linux
  • Linux Kernel
Published: November 9, 2025

CVE-2025-40109

None
    Linux
  • Linux Kernel
Published: November 9, 2025
Click here to see more Vulnerabilities