■■□□□ Britain 🇬🇧: Average British computer criminal is young, male and not highly skilled, researcher finds.

https://go.theregister.com/feed/www.theregister.com/2021/04/13/computer_misuse_act_convictions_analysis/

■■□□□ ldsview: Search utility for LDAP directory dumps.

https://securityonline.info/ldsview-search-tool-for-ldap-directory-dumps/

■□□□□ #DataLeak: ParkMobile Breach Exposes License Plate Data, Mobile Numbers of 21M Users.

https://krebsonsecurity.com/2021/04/parkmobile-breach-exposes-license-plate-data-mobile-numbers-of-21m-users/

■■■□□ PIN bruteforcing if lockout is not enabled | The software rubber duck.

https://www.instagram.com/reel/CNaBvcFgX1b/?igshid=u5csu09obux

■■□□□ Back in a Bit: Attacker Use of the Windows Background Intelligent Transfer Service.

https://www.fireeye.com/blog/threat-research/2021/03/attacker-use-of-windows-background-intelligent-transfer-service.html

■■■■□ Over 100,000 web pages hosted by Google for business form searches overrun with backdoor RATs.

eSentire warns of remote-access trojans masquerading as PDFs

https://go.theregister.com/feed/www.theregister.com/2021/04/14/google_sites_malware/

■■■■□ United States 🇺🇸: A court-approved FBI operation was conducted to remove web shells from compromised US-based Microsoft Exchange servers without first notifying the servers' owners.

https://www.bleepingcomputer.com/news/security/fbi-nuked-web-shells-from-hacked-exchange-servers-without-telling-owners/

■■■■■ Microsoft today issued fixes for 114 vulnerabilities as part of its monthly security update release, which this month addressed 19 critical flaws, four critical Microsoft Exchange Server bugs found by the National Security Agency (NSA), and one zero-day bug in Desktop Window Manager.
 
CVE-2021-28310, a Win32k elevation of privilege vulnerability, is the only CVE under active attack patched this month.

Yesterday's patches also addressed four critical remote code execution vulnerabilities in Microsoft Exchange Server: CVE-2021-28480, CVE-2021-28481, CVE-2021-28482, and CVE-2021-28483. All of these were discovered by the NSA and affect Exchange Server versions 2013 through 2019.
CVE-2021-28480 and CVE-2021-28481 have a CVSS score of 9.8 and require no authorization or user interaction to exploit.

■■■■□ Traitor - Automatic Linux Privesc Via Exploitation Of Low-Hanging Fruit E.G. GTFOBin

https://github.com/liamg/traitor

■□□□□ HackBar v2.0 release: HackBar plugin for Burpsuite.

https://github.com/d3vilbug/HackBar/releases

https://securityonline.info/hackbar-v2-0-releases-hackbar-plugin-for-burpsuite/

■□□□□ Majority of Mobile App vulnerabilities are from Open Source code.

■■■■□ 13TB Data-Leak appears online pertaining to Dominos India 🇮🇳.

The data includes 250 internal employee files, 180 million customer order details and 1 million credit card details 💳

Data timeliness are from 2015 to 2021.

@ckure is in the process of assessing validity.

■■■■□ Adfsbrute - A Script To Test Credentials Against Active Directory Federation Services (ADFS), Allowing Password Spraying Or Bruteforce Attacks.

https://github.com/ricardojoserf/adfsbrute

■■■■□ PoC / exploit utilities.

CVE-2020-6516 - Chrome
CVE-2021-24027 - WhatsApp

https://github.com/CENSUS/whatsapp-mitd-mitm

■■■■□ New JavaScript Exploit Can Now Carry Out DDR4 Rowhammer Attacks.

https://thehackernews.com/2021/04/new-javascript-exploit-can-now-carry.html

■□□□□ Data-Leak / Iraq 🇮🇶

● Microsoft Mesh

https://m.youtube.com/watch?v=Xa0H-oO1uCc

● 📢 Hacking forum rf.ws is down. Last HeartBeat by the bot I created shows 11 hours.

■■■■□ Airstrike Attack - FDE bypass and EoP on domain joined Windows workstations (CVE-2021-28316).

https://shenaniganslabs.io/2021/04/13/Airstrike.html

■■■■□ Firefox 'fully compromised' in 15 minutes via SMASH attack.

https://go.theregister.com/feed/www.theregister.com/2021/04/15/rowhammer_ddr4/

■□□□□ Sweden 🇸🇪 blames Russia 🇷🇺 for Swedish Sports Confederation hack in 2017-18.