Rewterz News Archives - Page 481 of 1080

June 22, 2022

Rewterz Threat Alert – KONNI APT Group – Active IOCs

Severity High Analysis Summary Konni’s APT Group continues to attack malicious documents written in Russian. Konni’s APT Group conducts attacks with Russian-North Korean trade and economic […]

June 22, 2022

Rewterz Threat Alert – Donot APT Group – Active IOCs

Severity High Analysis Summary Donot APT group has been actively dropping malicious samples and targeting Government users to exfiltrate data. The group has previously been active […]

June 22, 2022

Rewterz Threat Alert – NJRAT – Active IOCs

Severity Medium Analysis Summary NjRat is a Remote Access Trojan, which is found leveraging Pastebin to deliver a second-stage payload after initial infection. There are multiple […]

June 22, 2022

Rewterz Threat Advisory – CVE-2021-39006 – IBM QRadar WinCollect Agent Vulnerability

Severity Medium Analysis Summary CVE-2021-39006 IBM QRadar WinCollect Agent 10.0 and 10.0.1 could allow an attacker to obtain sensitive information due to missing best practices. Impact […]

June 22, 2022

Rewterz Threat Advisory – CVE-2022-1642 – Apple swift-corelibs-foundation Vulnerability

Severity Medium Analysis Summary CVE-2022-1642 Apple swift-corelibs-foundation is vulnerable to a denial of service, caused by a flaw in JSON decoding with JSONDecoder. By sending a […]

June 21, 2022

Rewterz Threat Alert – BumbleBee Malware – Active IOCs

Severity Medium Analysis Summary The malware loader, Bumblebee, is used to download Cobalt Strike and perhaps other malware such as ransomware. It also replaces the BazarLoader […]

June 21, 2022

Rewterz Threat Alert – Agent Tesla Malware – Active IOCs

Severity Medium Analysis Summary Malspam is being used to target victims in an Agent Tesla campaign. Since its initial appearance in 2014, this has beendeployed in […]

June 21, 2022

Rewterz Threat Alert – REvil Ransomware – Active IOCs

Severity High Analysis Summary The REvil (also known as Sodinokibi) is a Ransomware-as-a-Service (RaaS). The first attack of REvil in middle of April 2019, and attracted huge attention […]

June 21, 2022

Rewterz Threat Alert – LokiBot Malware – Active IOCs

Severity Medium Analysis Summary In early 2016, LokiBot was originally made available on underground forums for cybercriminals to use against Microsoft Android phones. This malware steals […]