Hacking Articles Tips Tricks Videos Tutorials
468 subscribers
65.8K photos
15 videos
157 files
132K links
Exploit
Pentesting
Hacking
Red Team
Blue Team
Kali Linux
Bug Bounty
Black Hat
Cyber security etc

@Hacking_Video
@Hacking_attack
Download Telegram
Hacking Articles Tips Tricks Videos Tutorials
Photo
Kali Linux Tutorials
5 Essential Recovery Steps after a Trojan Horse Virus Attack

The best form of defense against a Trojan horse attack is prevention. Always ensure that the emails, websites, and links you open are authentic because a Trojan employs deceit to get into your system. It’s similar to the giant wooden Trojan horse that secretly carried Greek soldiers. When the people of Troy took the seemingly innocuous-looking horse into their city, the hidden soldiers let more of their countrymen in to conquer Troy.

While you can take every precaution to stop a Trojan, it may still breach your defenses. Trojans are getting more sophisticated, using social engineering tactics to deceive us. They may provoke various emotions to confuse us. For example, you may see a popup on a website that claims your computer needs a software update, with a link that carries an attachment corrupted with Trojan malware or some other PC virus infection.

Tips for recovering from Trojan malware

It’s hard to recover from Trojan malware because a Trojan could be hiding anything, from a keylogger to ransomware to a virus. Here are some tips that may help:

#1 Run Advanced Antivirus Software

As mentioned above, typical antivirus software struggles to remove emerging-malware like Trojans. Look for advanced antivirus downloads that use machine learning and artificial intelligence to find threatening patterns and behavior in sophisticated malware like Trojans and the like.

#2 Take the Device Offline

Whether you suspect that your computer or mobile device has a Trojan, take it offline immediately. You can do this by removing the ethernet cable from your PC and deactivating the WiFi connection. Some dangerous Trojans open backdoors for threat actors, and cutting off communication after a Trojan attack is paramount.

#3 Create Backups

A Trojan may start corrupting your data permanently. Create backups of your critical files on a USB device or external drive. Your files may already be infected, so don’t access them without scanning them thoroughly. It’s best practice to create regular backups in case of a malware attack in the future.

#4 Deep Clean for Trojan Rootkits

A Trojan rootkit can be disastrous because it gives a threat actor rootkit control of your system. Your operating system’s antivirus is unlikely to locate such subversive malware. Your first step is to run cutting-edge anti-malware software to locate the malware. If that doesn’t work, use security software that scans your computer’s boot sector for malware. However, the most effective way to remove a rootkit is to format your hard drive and reinstall your operating system.

#5 Change Your Login Credentials

Trojans that spy on you like Banker Trojans may carry spyware or keyloggers, so please change your usernames and passwords on a computer that’s free of malware. You may also want to activate two-step authentication. Even if a cybercriminal has your username and password, they’ll struggle to log into your email, bank, or social media accounts without access to another secure device of yours.

After the recovery process completes, please keep your firewall up to protect your network. Use the latest operating system with the newest security patches to iron out bugs that many Trojans exploit.

___________________________
@hacking_Attack
@Hacking_Video
hacking: security in practice
Hacking Pegusus website?

Ever hear of anyone with the Israeli company Pegusus Software turn it on the Israeli Pegusus website and give away the software so everyone can have it? No sense in just Kingdom Prince with deep pockets or every government agency having all the fun.

https://www.reddit.com/r/nottheonion/comments/qfhe12/new_york_times_journalist_ben_hubbard_hacked_with/

submitted by /u/Doug6388
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video
Hacking Articles Tips Tricks Videos Tutorials
Photo
Exploit Collector
WordPress TaxoPress 3.0.7.1 Cross Site Scripting

https://2.bp.blogspot.com/-S-N0q2XL8x8/WWlu5FDj1eI/AAAAAAAAIJA/vGskVQb_QegQZ0-UZMHSDeFJ08ju6pdGQCLcBGAs/s1600/h104.png
WordPress TaxoPress plugin version 3.0.l7.1 suffers from a persistent cross site scripting vulnerability.

MD5 | 5eff7bbc8b050998cbc2e8059305aa1a

Download
# Exploit Title: WordPress Plugin TaxoPress 3.0.7.1 - Stored Cross-Site Scripting (XSS) (Authenticated)
# Date: 23-10-2021
# Exploit Author: Akash Rajendra Patil
# Vendor Homepage:
# Software Link: https://wordpress.org/plugins/simple-tags/
# Tested on Windows
# CVE: CVE-2021-24444
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-24444
# Reference: https://wpscan.com/vulnerability/a31321fe-adc6-4480-a220-35aedca52b8b
How to reproduce vulnerability:

1. Install Latest WordPress

2. Install and activate TaxoPress Version 3.0.7.1
3. Navigate to Add Table >> add the payload into 'Table Name & Descriptions'
and enter the data into the user input field.

4. Enter JavaScript payload which is mentioned below
">x

5. You will observe that the payload successfully got stored into the
database and when you are triggering the same functionality in that
time JavaScript payload is executing successfully and we are getting a
pop-up.


Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video