🏂 Após bronze nos EUA, Priscila Cid é top 8 na Suíça e se despede de temporada no Snowboard Halfpipe com dois dos melhores resultados da carreira
🔗 Acesse o Brasil Zero Grau!
https://t.co/UegI3Rq6Un
Pretty much every site on our network has been scanned and attempted to be exploited so far.
If you didn't patch over the weekend, it might be safe to consider it compromised.
First attempt I see on the logs was on:
2025-12-03 21:00:24 18.182.x.z 403 "POST /_next/static/chunks/react-flight HTTP/1.1" "-" "Mozilla/5.0 (CVE-2025-55182 PoC)"
Before most people were even aware of it.
Interesting.. First scan for CVE-2025-53771 (latest Sharepoint vuln) on our logs was on July 16th, a few days before public disclosure.
172.174.82.132 16/Jul/2025:07:31:10 +0000 "GET /_layouts/15/ToolPane.aspx HTTP/1.1" "http://localhost" "Mozilla/5.0"
From a Microsoft IP address...
@riper81@hotjar@namesilo@AceDataCenters Other domains in the same server:
https://t.co/GVyhdsCL60
hotjar-cdn[.]com
statswp[.]org
spadeanalytica[.]com
Need to check if they are malicious too...
Pretty big issue:
Google and Microsoft Trusted Them. 2.3 Million Users Installed Them. They Were Malware.
https://t.co/53Ch9ZPS28
Extensions that get hijacked/bought are a common source of malware these days.
Found some additional domains in the same IP address as them ( cc @IDardikman @extensiontotal ) which might be connected.
https://t.co/ug81Wqnfxb
Expanded DNSArchive to also add web headers, CMS versions, links , css files, etc.
You can now search for it here (in beta):
https://t.co/rCGTnOGpHD
Ex:
All sites using PHP/5.2:
https://t.co/Zcv3HUNdBa
And you can still do DNS specific search here:
https://t.co/moYeBHcQWI
Feedback welcome!
Have you noticed this "?slince_golden=test" requests on your logs?
It is for a WordPress Backdoor. We wrote a small summary about it here:
https://t.co/amKL6NL0is
Seeing it on your logs too?
Nothing more useful than searching through over 1TB of logs in less than a sec with the Trunc terminal for some threat hunting...
Both via the terminal and web. It makes finding issues so quick.