Sys-Admin & InfoSec Channel. Страница 4

Sys-Admin InfoSec

OpenBLD.net DNS - Settings Updation Notice   - Who uses DoH/DoT bld.sys-adm.in (will deprecated) please switch to 🚀️️️️ ada.openbld.net - Change/Update ✨️️️️️️iOS, macOS Profile - If you are using DNS IP 109.234.39.72 (will deprecated) switch to 46.151.29.15 ~~~ • How to EN - https://lab.sys-adm.in/wiki/getting-started/setup • How to RU - https://lab.sys-adm.in/ru/wiki/getting-started/setup

8Base Ransomware: A Heavy Hitting Player

8Base ransomware group has remained relatively unknown despite the massive spike in activity in Summer of 2023, learn more about their attack patterns.

New Fast-Developing ThirdEye Infostealer Pries Open System Information | FortiGuard Labs

FortiGuard Labs recently came across files that look suspicious, even during a cursory review. Our subsequent investigation confirmed that the files are malicious and revealed there is more to them…

Unveiling Wagner Group’s Cyber-Recruitment

Cyble analyzes Wagner Ransomware, a ransomware variant promoting recruitment into PMC Wagner amidst ongoing Russian internal conflict.

Anatsa banking Trojan hits UK, US and DACH with new campaign

Anatsa returns with a new campaign targeting UK, US and DACH supported by droppers on Google Play Store.

Call for papers

Стань спикером на OFFZONE. Принимаем заявки до 17 июля

Unpacking RDStealer: An Exfiltration Malware Targeting RDP Workloads

In June 2023, Bitdefender Labs published a research paper about espionage operation in East Asia.

Update now! Apple fixes three actively exploited vulnerabilities

Apple has released security updates for several products to address a set of flaws it said were being actively exploited.

Trojanized Super Mario Game Installer Spreads SupremeBot Malware

Cyble analyzes SupremeBot, a crypto-mining client leveraging a trojanized Super Mario game installer to spread Umbral stealer malware.

None

Advisory: IDOR in Microsoft Teams Allows for External Tenants to Introduce Malware | JUMPSEC LABS

TL;DR Max Corbridge (@CorbridgeMax) and Tom Ellson (@tde_sec) of JUMPSEC’s Red Team recently discovered a vulnerability in the latest version of Microsoft Teams which allows for the possible introduction of malware into any organisations using Microsoft Teams in its default configuration. This is done by bypassing client-side security controls which prevent external tenants from sending […]

IoT devices and Linux-based systems targeted by OpenSSH trojan campaign | Microsoft Security Blog

Microsoft has uncovered an attack leveraging custom and open-source tools to target internet-facing IoT devices and Linux-based systems. The attack involves deploying a patched version of OpenSSH on affected devices to allow root login and the hijack of SSH credentials.

nOAuth: How Microsoft OAuth Misconfiguration Can Lead to Full Account Takeover

This blog will cover an authentication implementation flaw Descope discovered in Microsoft Azure AD OAuth applications that, when exploited, could lead to full account takeover.