A piece of new information-stealing malware called OpcJacker has been spotted in the wild since the second half of 2022 as part of a malvertising campaign.
“OpcJacker’s main functions include keylogging, taking screenshots, stealing sensitive data fro…
IcedID continues to deliver malspam emails to facilitate a compromise. This case covers the activity from a campaign in late September of 2022. Post exploitation activities detail some familiar and … Read More
The post Malicious ISO File Leads to…
|
Categories: News Tags: Lock and Code Tags: Anna Pobletts Tags: ChatGPT Tags: World Backup Day Tags: GitHub Tags: accidental breach Tags: DDoS service Tags: Instagram scammer Tags: top cyber threats of 2023 Tags: 3CX Tags: BingBang Tags: Apple Tags: EE phing Tags: phishing Tags: ransomware The most interesting security related news from the week of March 27 to April 2. |
The post A week in security (March 27 – April 2) appeared first on Malwarebytes Labs.
Paid Memberships Pro v2.9.8 (WordPress Plugin) – Unauthenticated SQL Injection
GLPI v10.0.2 – SQL Injection (Authentication Depends on Configuration)
GLPI Cartography Plugin v6.0.0 – Unauthenticated Remote Code Execution (RCE)
SQL Monitor 12.1.31.893 – Cross-Site Scripting (XSS)
AmazCart CMS 3.4 – Cross-Site-Scripting (XSS)
Active eCommerce CMS 6.5.0 – Stored Cross-Site Scripting (XSS)
