Fighting well-known malware is an endless activity. This fall is not the first case of infection of packages that are actively used in the development of various software. Have you tried the new GitHub exploit yet? Vulnerabilities: DNS spoofing, Netgear SOHO routers and malicious python packets; Tools: STACS, Kubernetes-Goat and Gotanda – coold extension; News: … Continue reading Emotet come back, vulnerable PyPi packets and APT activity →
Fighting well-known malware is an endless activity. This fall is not the first case of infection of packages that are actively used in the development of various software. Have you […] The post Emotet come back, vulnerable PyPi packets and APT activity appeared first on Vulners Blog - Information security news, research and Vulners features.
APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfile.cc. This issue affects: apt 1.2.32ubuntu0 versions prior to 1.2.32ubuntu0.2; 1.6.12ubuntu0 versions prior to 1.6.12ubuntu0.2; 2.0.2ubuntu0 versions prior to 2.0.2ubuntu0.2; 2.1.10ubuntu0 versions prior to 2.1.10ubuntu0.1;
Эта статья - продолжение серии статей "Привет Emotet!", заключительная её частьПервую и вторую статьи вы можете найти здесь и здесь.В данной статье, мы решили убрать в сторону плагины volalatility, автоматизирующие нашу работу и прогуляться по узким коридорам памяти, в поисках артефактов. Давайте начнём. Читать далее