Cybercrime, an RFQ mail carries an unknown malware
The xlsx file uses an Excel CVE to contact an IP and download the payload. The link is not active now, but downloaded several during the day.
Cybercrime, new Ursnif/Gozi campaign in Italy via false BRT invoice
The email xlsm attachment contacts single url from which it downloads the dll, which starts malware infection. But only from Italian IPs and if they are not blacklisted.
Cybercrime, Formbook conveyed through a false request for quotation
The email gz attachment contains an exe file: the malware itself. This, if opened, starts the infection.
WordPress, critical vulnerability discovered on “Spam protection, AntiSpam, FireWall”
The flaw in the plugin can be used to extract sensitive info from a site's database, including user emails and password hashes. There is also a PoC.
Syria, the SDF launch the hunt for the Islamic State north of Deir Ezzor
Maneuvers underway with Inherent Resolve in Wadi al-Ajij. Objective: to neutralize the IS operative cells and their logistic network with Turkey.
Cybercrime, the MH370 tragedy lure for a new scam campaign
The fake vice chairman of a Turkish bank, managing the asset of a businessman killed in the Malaysia Airlines flight crash, offers to divide it with the potential victim.
Cybercrime, beauty salons worldwide could be targeted soon
A user called bob934 is selling on Raid Forums a huge private database with 1,253,686 records. Many of them are still active.
Syria, rival militias target HTS leaders between Idlib and Aleppo
Attack on one of al-Jolani's bodyguards. The smaller pro-Turkey groups are increasingly desperate and ready to do anything not to disappear.
Cybercrime, new phishing campaign via “action required” on held messages
The objective is to steal credentials. The attack is tailored on the victim, as the email address is already fixed in the fake provider login page.
Cyber Espionage, Chinese hackers exploit anti virus flaws to strike
Recorded Future cybersecurity experts: Unit 61419 bought small English AV batches from Western companies through intermediaries.