Leafminer cyber espionage group targets Middle East
July 30th, 2018 đ
Hackers belonging an Iran-linked APT group tracked as âLeafminerâ have targeted government and various organizations in the Middle East. An Iran-linked APT
Monthly Archives: July 2018
sRDI – Shellcode Implementation Of Reflective DLL Injection
July 30th, 2018 đ
sRDI allows for the conversion of DLL files to position independent shellcode. Functionality is accomplished via two components: C project
US-CERT warns of ongoing cyber attacks aimed at ERP applications
July 30th, 2018 đ
US-CERT warns of cyber attacks on ERP applications, including Oracle and SAP, and refers an interesting report published by Digital Shadows
WTF – A Personal Information Dashboard For Your Terminal
July 30th, 2018 đ
A personal terminal-based dashboard utility, designed for displaying infrequently-needed, but very important, daily data. Quick Start Download and run the
EvilOSX – An Evil RAT (Remote Administration Tool) For macOS/OS X
July 27th, 2018 đ
An evil RAT (Remote Administration Tool) for macOS / OS X. Features Emulate a terminal instance Simple extendable module system No bot
Hackers Hiding Web Shell Logins in Fake HTTP Error Pages
July 27th, 2018 đ
Malware distributors, hackers, and phishing scammers are continuing to use the practice of hiding login forms for their web shells in
Photon – Incredibly Fast Crawler Which Extracts Urls, Emails, Files, Website Accounts And Much More
July 27th, 2018 đ
Photon is a lightning fast web crawler which extracts URLs, files, intel & endpoints from a target. Yep, you can use 100
The source code of the Exobot Android banking trojan has been leaked online
July 25th, 2018 đ
The source code of the Exobot Android banking trojan has been leaked online, researchers already verified its authenticity. The source code
Git-Secrets – Prevents You From Committing Secrets And Credentials Into Git Repositories
July 25th, 2018 đ
Prevents you from committing passwords and other sensitive information to a git repository. Synopsis git secrets --scan -r|--recursive] --cached] --no-index] --untracked] <files>...] git secrets
CVE-2018-5383 Bluetooth flaw allows attackers to monitor and manipulate traffic
July 25th, 2018 đ
Security researchers have found a high severity flaw (CVE-2018-5383) affecting some Bluetooth implementations that allow attackers to manipulate traffic. Security researchers at the
Cred Scanner – A Simple File-Based Scanner To Look For Potential AWS Access And Secret Keys In Files
July 25th, 2018 đ
A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other,
Repokid – AWS Least Privilege For Distributed, High-Velocity Deployment
July 24th, 2018 đ
Repokid uses Access Advisor provided by Aardvark to remove permissions granting access to unused services from the inline policies of IAM roles
TA505 gang abusing PDF files embedding SettingContent-ms to distribute FlawedAmmyy RAT
July 24th, 2018 đ
Proofpoint uncovered a massive malspam campaign leveraging emails delivering weaponized PDF documents containing malicious SettingContent-ms files. Security experts from Proofpoint
NETworkManager – A Powerful Tool For Managing Networks And Troubleshoot Network Problems
July 24th, 2018 đ
A powerful tool for managing networks and troubleshoot network problems! Features Network Interface – Information, Configure IP-Scanner Port-Scanner Ping Traceroute
Scout2 – Security Auditing Tool For AWS Environments
July 23rd, 2018 đ
Scout2 is a security tool that lets AWS administrators assess their environment’s security posture. Using the AWS API, Scout2 gathers
Experts discovered Calisto macOS Trojan, the first member of Proton RAT family
July 23rd, 2018 đ
Security experts from Kaspersky Lab have discovered a precursor of the infamous Proton macOS malware that was named Calisto. Malware researchers from
Hindsight – Internet History Forensics For Google Chrome/Chromium
July 23rd, 2018 đ
Hindsight is a free tool for analyzing web artifacts. It started with the browsing history of the Google Chrome web browser and
Camelishing – Social Engineering Tool
July 21st, 2018 đ
Camelishing Social Engineering Tool Features Bulk email sending Basic Python Agent Creator Office Excel Macro Creator DDE Excel Creator(or
Expert discovered RoboCent AWS S3 bucket containing US votersâ records exposed online
July 21st, 2018 đ
A security researcher has discovered that the US political robocall firm RoboCent exposed personal details of hundreds of thousands of US voters.
Seeker – Find GeoLocation With High Accuracy
July 20th, 2018 đ
Seeker utilizes HTML5, Javascript, JQuery and PHP to grab Device Information and GeoLocation with High Accuracy. Other tools and services offer IP Geolocation which is not very accurate
QUASAR, SOBAKEN AND VERMIN RATs involved in espionage campaign on Ukraine
July 20th, 2018 đ
Security experts from ESET uncovered an ongoing cyber espionage campaign aimed at Ukrainian government institutions and involving three different RATs, including
Scan your exposure to domain and subdomain hijacking over 10’s of cloud providers
July 20th, 2018 đ
Domain Hijacking is a well-known security issue that can be carried in many different ways. In addition to social engineering
-
-
Popular
Understanding Evil Twin AP Attacks and How to Prevent Them November 23, 2018 The attack surface remains largely unprotected from Wi-Fi threats that…
Kamerka – Build Interactive Map Of Cameras From Shodan December 1, 2018 Build an interactive map of cameras from Shodan. The script…
Widespread Malvertising Campaign Hijacks 300 Million… November 28, 2018 Researchers say the bad actor behind the malvertising campaign is…
Kbd-Audio – Tools For Capturing And Analysing… December 1, 2018 This is a collection of command-line and GUI tools for…
FBI along with security firms dismantled 3ve Ad… December 1, 2018 FBI along with cybersecurity firms dismantled a sophisticated ad fraud scheme…
AccuDoc Data Breach impacted 2.6 Million Atrium… December 1, 2018 Hospital network Atrium Health suffered a data breach, hacked accessed…
Experts demonstrate how to exfiltrate data using smart bulbs November 29, 2018 Security researchers with Checkmarx developed two mobile applications that abuse…
Osweep – Don’t Just Search OSINT, Sweep It December 9, 2018 If you work in IT security, then you most likely…
Latest
-
Seedworm APT Group targeted more than 130 victims in 30 organizations since Sept
December 15th | by
-
Celerystalk – An Asynchronous Enumeration and Vulnerability Scanner
December 15th | by
-
Group-IB identifies leaked credentials of 40,000 users of government websites in 30 countries
December 13th | by
-
Knock v.4.1.1 – Subdomain Scan
December 13th | by
-
Security Culture
December 13th | by
-
Jackhammer – One Security Vulnerability Assessment/Management Tool To Solve All The Security Team Problems
December 13th | by
-
Experts at Yoroi â Cybaze Z-Lab analyzed MuddyWater Infection Chain
December 9th | by
-
Osweep – Don’t Just Search OSINT, Sweep It
December 9th | by
-
Fileless malware surge, warns Malwarebytes report
December 9th | by
Now Trending Topics
-
How to crack "unprotected" wifi that takes you to a username/password screen
by
shiftguy
-
Assistance using Tor's Hammer
by
kaka79
-
A spammer is using my email address
by
tomalot
-
AOL security breach affects a significant number of users
by
elbala32
-
Finding password hashes in OSx
by
consarock
-
Port Forwarding
by
nairhost
-
Security Certifications
by
bland
-
How to crack "unprotected" wifi that takes you to a username/password screen
by
Comments