Rewterz News Archives - Page 726 of 1080

August 23, 2021

Rewterz Threat Alert – Vidar Malware – Active IOCs

Severity High Analysis Summary Spyware.Vidar is a product that offers threat actors the option to set their preferences for the stolen information. Besides credit card numbers […]

August 22, 2021

Rewterz Threat Advisory – LockFile Ransomware Hacked Multiple Microsoft Exchange Servers

Severity High Analysis Summary CVE-2021-34473 – Pre-auth Path Confusion leads to ACL Bypass. CVE-2021-34523 – Elevation of Privilege on Exchange PowerShell Backend CVE-2021-34473 – Post-auth Arbitrary-File-Write leads to RCE […]

August 22, 2021

Rewterz Threat Alert – NJRAT – Active IOCs

Severity Medium Analysis Summary NjRat is a Remote Access Trojan, which is found leveraging Pastebin to deliver second-stage payload after initial infection. There are multiple versions […]

August 22, 2021

Rewterz Threat Alert – AZORult Malware – Active IOCs

Severity Medium Analysis Summary AZORult is a payment card and credential information stealer. It was sold on Russian underground forums as a means to collect sensitive […]

August 22, 2021

Rewterz Threat Advisory – Detection and Prevention of Web Shell Malware

Severity High Analysis Summary For computer network exploitation, cyber attackers have boosted their usage of web shell malware. Web shell malware is malicious software that a […]

August 22, 2021

Rewterz Threat Alert – Cerberus Banking Trojan – Active IOCs

Severity High Analysis Summary A recent analysis of the Cerberus banking Trojan, performed by Anomali, delves into its current capabilities, including the current malware-as-a-service activity associated […]

August 22, 2021

Rewterz Threat Alert –GandCrab Ransomware – Active IOCs

Severity High Analysis Summary Fresh IoCs have been retrieved from a campaign distributing the GandCrab ransomware. GandCrab campaigns typically involve emails designed to deceive a potential […]

August 22, 2021

Rewterz Threat Advisory – ICS – Siemens SINEMA Vulnerability

Severity High Analysis Summary CVE-2021-31338 Siemens SINEMA Remote Connect Client could allow a locally authenticated attacker to gain elevated privileges on the system, caused by allowing […]

August 22, 2021

Rewterz Threat Alert – APT32 Ocean Lotus – IOCs

Severity High Analysis Summary Cyber espionage actors, aka APT32 (OceanLotus Group), are carrying out intrusions into private sector companies across multiple industries and have also targeted […]