⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This malware analysis report from CISA covers multiple backdoor families including SUBMARINE, SKIPJACK, SEASPRAY, WHIRLPOOL, and SALTWATER. These tools provide attackers persistent remote access and data theft capabilities. Defenders are provided with detection signatures and IOCs to identify compromise.
This CISA Malware Analysis Report details five malware samples associated with the SUBMARINE, SKIPJACK, SEASPRAY, WHIRLPOOL, and SALTWATER backdoors. These backdoors were deployed on Barracuda Email Security Gateway devices compromised via CVE-2023-2868, a former zero-day vulnerability.
This malware analysis report from CISA covers multiple backdoor families including SUBMARINE, SKIPJACK, SEASPRAY, WHIRLPOOL, and SALTWATER. These tools provide attackers persistent remote access and data theft capabilities. Defenders are provided with detection signatures and IOCs to identify compromise.
Notification This report is provided "as is" for informational purposes only.
CISA released an analysis report detailing how multiple nation-state threat actors are exploiting CVE-2022-47966 and CVE-2022-42475, providing indicators of compromise and recommended mitigations.
This CISA Malware Analysis Report analyzes four files from an incident response engagement at an aeronautical sector organization. The files include two Meterpreter payload variants designed to establish interactive shells and two ASPX web shells for remote code execution.