I recently joined a start up company that specializes in software development as a cybersecurity risk management for an internship of 6 months, my first task was to audit the company’s gitlab page since all they use for their coding work i…
A sophisticated attack campaign dubbed SCARLETEEL is targeting containerized environments to perpetrate theft of proprietary data and software.
“The attacker exploited a containerized workload and then leveraged it to perform privilege escalation into …
Misconfigured Redis database servers are the target of a novel cryptojacking campaign that leverages a legitimate and open source command-line file transfer service to implement its attack.
“Underpinning this campaign was the use of transfer[.]sh,” Cad…
As a primary working interface, the browser plays a significant role in today’s corporate environment. The browser is constantly used by employees to access websites, SaaS applications and internal applications, from both managed and unmanaged devices….
A malicious Python package uploaded to the Python Package Index (PyPI) has been found to contain a fully-featured information stealer and remote access trojan.
The package, named colourfool, was identified by Kroll’s Cyber Threat Intelligence team, wit…
On one of our Windows Datacenter 2016, there’s an alert that a trojan is trying to install :
The following PowerShell commands are trying to execute at seemingly random hours of the day (always during working hours, one to two times a day…
I’m currently trying to learn Nmap -O (OS guess feature).
I’m launching the following command: nmap -O 172.17.0.3
This command is generating the following fingerprint as output:
No exact OS matches for host (If you know what OS is runn…
The threat actor known as Lucky Mouse has developed a Linux version of a malware toolkit called SysUpdate, expanding on its ability to target devices running the operating system.
The oldest version of the updated artifact dates back to July 2022, with…
Cisco on Wednesday rolled out security updates to address a critical flaw impacting its IP Phone 6800, 7800, 7900, and 8800 Series products.
The vulnerability, tracked as CVE-2023-20078, is rated 9.8 out of 10 on the CVSS scoring system and is describe…
|
Categories: News Tags: RIG EK Tags: exploit kit Tags: MakeMoney Tags: Internet Explorer Tags: Jerome Segura The RIG Exploit Kit is one of the last major exploit kits that still targets the legacy Internet Explorer browser. |
The post Internet Explorer users still targeted by RIG exploit kit appeared first on Malwarebytes Labs.
