Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This CISA Malware Analysis Report details five malware samples associated with the SUBMARINE, SKIPJACK, SEASPRAY, WHIRLPOOL, and SALTWATER backdoors. These backdoors were deployed on Barracuda Email Security Gateway devices compromised via CVE-2023-2868, a former zero-day vulnerability.
This CISA Malware Analysis Report analyzes four files from an incident response engagement at an aeronautical sector organization. The files include two Meterpreter payload variants designed to establish interactive shells and two ASPX web shells for remote code execution.
Notification This report is provided "as is" for informational purposes only.
CISA released an analysis report detailing how multiple nation-state threat actors are exploiting CVE-2022-47966 and CVE-2022-42475, providing indicators of compromise and recommended mitigations.
CISA published a malware analysis report on Infamous Chisel, a persistent Android backdoor targeting mobile devices. The malware focuses on data exfiltration including network configurations and credentials.
Infamous Chisel–A collection of components associated with Sandworm designed to enable remote access and exfiltrate information from Android phones. Executive Summary Infamous Chisel is a collection of components targeting Android devices.