Rewterz News Archives - Page 575 of 1080

March 28, 2022

Rewterz Threat Alert – Agent Tesla Malware – Active IOCs

Severity Medium Analysis Summary A new AgentTesla campaign is seen targeting victims with malspam. AgentTesla is known for stealing data from different applications on victim machines, […]

March 28, 2022

Rewterz Threat Alert – BlackMoon Banking Trojan – Active IOCs

Severity High Analysis Summary BlackMoon, aka KRBanker, is a banking trojan it can steal financial and banking account information as well as other sensitive data. Blackmoon […]

March 28, 2022

Rewterz Threat Alert – FormBook Malware – Active IOCs

Severity Medium Analysis Summary Since 2016, FormBook has been active as a data-stealing malware that affects 4% of enterprises in 2020. It tracks and monitors keystrokes, […]

March 28, 2022

Rewterz Threat Alert – Shodi Malware – Active IOCs

Severity Medium Analysis Summary W32/Shodi-F – a virus targeting Windows platform – seeks to infect all files with the EXE extension, except for specific Windows system […]

March 28, 2022

Rewterz Threat Alert – RedLine Stealer – Active IOCs

Severity High Analysis Summary Redline is an info stealer malware that steals information from web browsers and has the ability to corrupt operating systems by installing […]

March 28, 2022

Rewterz Threat Alert – Energetic Bear APT Group – Active IOCs

Severity High Analysis Summary Energetic Bear – aka Dragonfly, is a cyberespionage group active since at least 2011. They first targeted defense and aviation businesses, but […]

March 28, 2022

Rewterz Threat Alert – Mustang Panda’s Hodur – Active IOCs – Russian-Ukrainian Cyber Warfare

Severity High Analysis Summary Researchers have identified recent Mustang Panda activity that involves the use of DLL side-loading to deliver PlugX. A new korplug variant has […]

March 28, 2022

Rewterz Threat Advisory – CVE-2022-22374 – IBM POWER9 Vulnerability

Severity High Analysis Summary CVE-2022-22374 The BMC (IBM Power 9 AC922 OP910, OP920, OP930, and OP940) may be subject to downgrade attack which may affect its […]

March 28, 2022

Rewterz Threat Advisory – CVE-2022-1040 – Sophos Firewall Vulnerability

Severity High Analysis Summary CVE-2022-1040 An authentication bypass vulnerability allowing remote code execution was discovered in the User Portal and Webadmin of Sophos Firewall and responsibly […]