Threat Analysis: Active C2 Discovery Using Protocol Emulation Part2 (Winnti 4.0)
🗣digicat

Part 1: https://www.carbonblack.com/2019/09/04/cb-tau-threat-intelligence-notification-winnti-malware-4-0/

🎖@malwr

🚨 CVE-2020-9320
Avira AV Engine before 8.3.54.138 allows virus-detection bypass via a crafted ISO archive. This affects versions before 8.3.54.138 of Antivirus for Endpoint, Antivirus for Small Business, Exchange Security (Gateway), Internet Security Suite for Windows, Prime, Free Security Suite for Windows, and Cross Platform Anti-malware SDK.

🎖@cveNotify

🚨 CVE-2019-14688
Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installation. The vulnerability was found to ONLY be exploitable during an initial product installation by an authorized user. The attacker must convince the target to download malicious DLL locally which must be present when the installer is run.

🎖@cveNotify

Mobile networks - Do they have a text message spam filter?
Someone is using my phone number when making online enquires. They've been doing it for about 2 months now. So I'm getting unsolicited texts and calls.

I've decided to attempt to contact the person to persuade them to stop. In my country, I predict I'll need to send 100 text messages to find them...if they respond to the text. It feels like they're changing a digit of their own phone number.

The content of the text will be exactly the same, it'll be using a newly registered sim, and I'll be using a GSM module connected to my computer.

If this were emails, I imagine Google and Microsoft would probably mark the emails as spam. And so I'm curious if mobile networks would treat text messages in the same manner?

I ask in this sub because I imagine someone in this community has played with mass text messages and I can't think of a better sub.
🗣reddit_user33

Mobile networks do have some spam protections, depending on the service provider. The problem is that many of these networks allow phone number spoofing, meaning you can call from a number you don’t own. This bypasses a lot of the anti-spam protections in place. It’s a huge problem world wide and there’s not much anyone can do about it because networks don’t want to spend the money to fix it, and government agencies won’t force them to fix it. (Often because these government agencies get lobbied by the networks)

There’s really just not much you can do. Even if you call the original number, there’s probably not a person on the other side, just a computer.
👤NullOfUndefined


🎖@malwr

MASSIVE Slickwraps Data breach!

https://preview.redd.it/glle8vcgpbi41.png?width=1892&format=png&auto=webp&s=f51a26272b2fb64b01fe2b25b22bef1b1a95ae4e

Whole story at https://medium.com/@lynx0x00/i-hacked-slickwraps-this-is-how-8b0806358fbb

https://www.droid-life.com/2020/02/21/slickwraps-appears-to-have-suffered-a-massive-data-breach/

https://www.androidcentral.com/slickwraps-website-full-vulnerabilities-and-they-dont-seem-care

https://www.androidpolice.com/2020/02/21/slickwraps-has-been-hacked-customer-data-is-compromised/
🗣projeto56


Whole story at https://medium.com/@lynx0x00/i-hacked-slickwraps-this-is-how-8b0806358fbb(Includes PDF of the pentest report)


https://www.androidpolice.com/2020/02/21/slickwraps-has-been-hacked-customer-data-is-compromised/
👤projeto56


🎖@malwr

A new malware sample format called UMSE (Universal Malware Sample Encryption) which improves user confidentiality and reverse engineering process is now available here: https://github.com/dalvarezperez/umse/


ℹ️ Sent from one of our subscribers

🎖@malwr