Tag: traffic hijacking

2 Attack Reports | 0 Vulnerabilities

Attack reports

Funnull Resurfaces: Exposing RingH23 Arsenal and MacCMS Supply Chain Attacks

The report details the resurgence of the Funnull cybercriminal group, now utilizing a new arsenal called RingH23. It exposes their tactics, including compromising GoEdge CDN nodes, poisoning the MacCMS supply chain, and deploying sophisticated malware components like Badredis2s, Badnginx2s, and Bad…
cryptocurrency theft
supply chain attack
traffic hijacking
2026-03-02
badhide2s
badnginx2s
badredis2s
cdn poisoning
maccms
ringh23
v2deck
Published: March 2, 2026
Downloadable IOCs: 40

Cascading Redirects: Unmasking a Multi-Site JavaScript Malware Campaign

A recent investigation uncovered a malicious JavaScript injection affecting WordPress websites, redirecting visitors to unwanted third-party domains. The attack vector involves a two-stage redirection process, injecting code into theme files and loading external scripts. The malware creates hidden …
wordpress
javascript injection
2025-03-07
malicious redirects
traffic hijacking
theme file modification
two-stage attack
seo damage
Published: March 7, 2025
Downloadable IOCs: 3
Click here to see more Attack Reports