Dead_Cat

#security #hacking #exploit #spyware #Malware Researcher #botnet

[Clandestine @akaclandestine]

GitHub - soltanali0/CVE-2025-53770-Exploit: SharePoint WebPart Injection Exploit Tool https://t.co/KsfBFjetkl

[Richard S. @Richard_S81]

#Hacking #APT #DanderSpritz #DoubleFeature #Malware #Vulnerability #CyberCrime #CyberAttack #CyberSecurity
Researchers analyzed the DoubleFeature logging tool of DanderSpritz Framework that was used by the Equation Group APT group.
https://t.co/y5FljUxmCx

[Timele12138 @Timele9527]

#APT threat analysis report about #India #Patchwork：
"Analysis of phishing attacks against countries such as China and the South Asian subcontinent"
report：
https://t.co/9EaAjK7Jic
https://t.co/p4v0309PgF

[BitdefenderLabs @BitdefenderLabs]

Iranian Chafer APT Targeted Air Transportation and Government in Kuwait and Saudi Arabia https://t.co/6Yrk7WBTtc via @BitDefenderLabs

[Virus Bulletin @virusbtn]

Avast researchers analyse the source code of the GhostDNS router exploit kit https://t.co/5DK3sTDLK3

[RIVER @wugeej]

Siemens S7 PLC S7-1500 M2 Bypass RCE

1.sends a function code data packet to the PLC

2.The function code data packet contains the IntergrityPart field (➡️MagicField:0xfee1dead)

3.Bypass and the corresponding function code is executed.

https://t.co/tEbuHRubez

[heige @80vul]

I just published Identifying Cobalt Strike team servers in the wild by using ZoomEye(Part 2) https://t.co/F6qRN49aUu

[Marc R @Seifreed]

Breaking news!! The latest Malware Hunters! edition is out: https://t.co/gy0CGlqo6C Thanks to: @JohnLaTwC @James_inthe_box @malwaremustd1e #malwaremustdie #blog

[TEAM CYMRU @teamcymru]

Two unpatched RCE flaws in rConfig software expose servers to #hack #vulnerability #infosec https://t.co/BbMleryBoj

[Sean Harris @InfoSecHotSpot]

Researchers detect an updated Gafgyt variant that targets flaws in small office and home wireless routers from Zyxel, Huawei, and Realtek. https://t.co/Sfd3LRuEYy via @InfoSecHotSpot

[InQuest @InQuest]

Interesting #Lazarus #DTrack sample with hardcoded RFC1918 addresses and username KKNPP tied to the Kudankulam Nuclear Power Plant (KKNPP) Hash: 4f8091a5513659b2980cb53578d3f798 (https://t.co/YEIXxpZ4lW)

[blueblue @piedpiper1616]

GitHub - v-gift/CVE-2019-2890: CVE-2019-2890 Exploit for WebLogic with T3 https://t.co/zhBInjVRmc

[RIVER @wugeej]

GTFOBins

GTFOBins is a curated list of Unix binaries that can be exploited by an attacker to bypass local security restrictions.

#aptget
#cat
#man
#whois

#Shell #Command #Reverseshell #Noninteractivereverseshell #Bindshell #Noninteractivebindshell

https://t.co/EjuxkIItxa

[CyberWar - 싸워 @cyberwar_15]

#NorthKorea #APT #Korean_News

https://t.co/CKcEvwrD0i

[blackorbird @blackorbird]

#APT This year, #Oceanlotus’s attack methods against Vietnam are all inside.
After writing, my keyboard is broken.
https://t.co/Bs0Nhd5u2I

[Dead_Cat @pluckljn]

GitLab 11.4.7 Remote Code Execution https://t.co/Lgv2O79mqc

[Dead_Cat @pluckljn]

Fileless Linux Malware Framework
https://t.co/wlhnGmt3MR

[Dead_Cat @pluckljn]

Who is GOSSIPGIRL? by Chronicle
#GOSSIPGIRL#Flame
https://t.co/vyXMDvUa0E