Rewterz News Archives - Page 617 of 1080

February 4, 2022

Rewterz Threat Alert – Lazarus APT Group – Active IOCs

Severity High Analysis Summary Lazarus APT is one of North Korea’s most sophisticated threat actors, operating since at least 2009. Initially, they concentrated on South Korea. […]

February 4, 2022

Rewterz Threat Alert – Kimsuky APT Group – Active IOCs

Severity High Analysis Summary Kimsuky is a North Korean threat actor active since 2012. It primarily targets South Korean government agencies and conducts espionage activities against […]

February 4, 2022

Rewterz Threat Alert – APT SideWinder Group – Active IOCs

Severity High Analysis Summary Sidewinder is a suspected Indian threat actor group that has been active since 2012. They have observed attacking political, military, and corporate […]

February 4, 2022

Rewterz Threat Advisory – CVE-2021-39021 – IBM Security Guardium Data Encryption Vulnerability

Severity Medium Analysis Summary CVE-2021-39021 IBM Guardium Data Encryption (GDE) 5.0.0.2 behaves differently or sends different responses under different circumstances in a way that is observable […]

February 4, 2022

Rewterz Threat Advisory – Multiple Apache Gobblin and ActiveMQ Artemis Vulnerabilities

Severity High Analysis Summary CVE-2021-36152 Apache Gobblin could provide weaker than expected security, caused by an issue with all certificates used for LDAP connections are trusted […]

February 3, 2022

Rewterz Threat Alert – Ursnif Banking Trojan – Active IOCs

Severity High Analysis Summary Ursnif banking trojan also known as Gozi and Dreambot has been around for more than 10 years. It gained popularity in 2015 […]

February 3, 2022

Rewterz Threat Alert – CoinStomp Malware – Active IOCs

Severity High Analysis Summary The newly discovered malware is targeting Asian CSPs (Cloud Service Providers). It employees Anti-hardening and Anti-forensics techniques. CoinStomp consists of multiple shell […]

February 3, 2022

Rewterz Threat Advisory – Multiple Advantech Zero-days

Severity High Analysis Summary CVE-2021-38389 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess. Authentication is not required to exploit […]

February 3, 2022

Rewterz Threat Alert – Sugar Ransomware – Active IOCs

Severity High Analysis Summary The crypter being used reuses the code from the ransomware itself. According to the security Researchers, the crypter is a modified form […]