A C# MS-SQL toolkit designed for offensive reconnaissance and post-exploitation. For detailed usage information on each technique, refer to the wiki. Usage You can grab a copy of SQLRecon from the releases page. Alternatively, feel free to compile …
 |
|
| Researchers have uncovered a targeted phishing campaign exploiting a XSS zero-day vulnerability in the Zimbra email platform.
Categories: Exploits and vulnerabilities Tags: EmailThiefTEMP_Hereticxsszero-day |
The post Threat actor steals email with Zimbra zero-day appeared first on Malwarebytes Labs.
 |
|
| The FBI has issued a warning about a scheme that robs nearly $3,000 per victim. We see what the scammers are up to.
Categories: Scams Tags: bogusfakefbifraudhirejob |
The post FBI warns of bogus job postings on recruitment sites appeared first on Malwarebytes Labs.
 |
|
| Investment scams are on the rise. What types are there and how can you recognize them?
Categories: Scams Tags: advance feeclone scaminsider knowledgeinvestment scamsmarket manipulationponzi schemepyramid schemetax avoidance |
The post Investment scams are on the rise appeared first on Malwarebytes Labs.
A now-patched security vulnerability in Apple iOS that was previously found to be exploited by Israeli company NSO Group was also separately weaponized by a different surveillance vendor named QuaDream to hack into the company’s devices.
The developme…
elfloader is a super simple loader for ELF files that generates a flat in-memory representation of the ELF. Pair this with Rust and now you can write your shellcode in a proper, safe, high-level language. Any target that LLVM can target can be use…
A number of India-based call centers and their directors have been indicted for their alleged role in placing tens of millions of scam calls aimed at defrauding thousands of American consumers.
The indictment charged Manu Chawla, Sushil Sachdeva, Nitin…
The Russia-linked Gamaredon hacking group attempted to compromise an unnamed Western government entity operating in Ukraine last month amidst ongoing geopolitical tensions between the two countries.
Palo Alto Networks’ Unit 42 threat intelligence team…
Most security practitioners are now aware of the Log4Shell vulnerability discovered toward the end of 2021. No one knows how long the vulnerability existed before it was discovered. The past couple of months have had security teams scrambling to patch…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday published an Industrial Controls Systems Advisory (ICSA) warning of multiple vulnerabilities in the Airspan Networks Mimosa equipment that could be abused to gain remote code…
