Rewterz News Archives - Page 621 of 1080

January 31, 2022

Rewterz Threat Alert – SmokeLoader Malware – Active IOCs

Severity Medium Analysis Summary Smoke Loader, a malicious bot application can be used to load additional malware. Smoke Loader has been spotted in the wild since […]

January 31, 2022

Rewterz Threat Alert – Dark Crystal RAT – Active IOCs

Severity High Analysis Summary Researchers have analyzed the Dark Crystal RAT capabilities and C2 message format. Unlike a real RAT server, this one does not have […]

January 31, 2022

Rewterz Threat Alert – Gamaredon APT – Active IOCs

Severity High Analysis Summary Gamaredon is a Russia-backed advanced persistent threat (APT) that has been operating since at least 2013. The main goal of this APT […]

January 31, 2022

Rewterz Threat Alert – AZORult Malware – Active IOCs

Severity High Analysis Summary The AZORULT malware is an information stealer which was discovered in 2016. This malware steals IDs, browsing history, cookies, passwords, and other […]

January 31, 2022

Rewterz Threat Alert – APT29 Cozy Bear – Active IOCs

Severity High Analysis Summary APT29 aka Nobelium and Cozy Bear are the group which were behind the infamous Solar Wind attacks in 2020. APT29 threat group […]

January 31, 2022

Rewterz Threat Alert – APT32 Ocean Lotus – Active IOCs

Severity High Analysis Summary A Vietnam-based threat group, APT32 (OceanLotus Group) is active since 2014. It is known for carrying out sophisticated attacks on several private […]

January 31, 2022

Rewterz Threat Advisory – CVE-2022-21882 – Windows Vulnerability Exploited in the Wild

Severity High Analysis Summary CVE-2022-21882 Microsoft Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by a flaw in the […]

January 31, 2022

Rewterz Threat Alert – Lazarus APT Group – Active IOCs

Severity High Analysis Summary Lazarus APT is one of North Korea’s most sophisticated threat actors, operating since at least 2009. Initially, they concentrated on South Korea. […]

January 31, 2022

Rewterz Threat Advisory – CVE-2022-20685 – Multiple Cisco Products Snort Modbus Vulnerabilities

Severity High Analysis Summary CVE-2022-20685 Multiple Cisco Products Snort Modbus are vulnerable to a denial of service, caused by an integer overflow while processing Modbus traffic. […]