Dissecting Buffer Overflow Attacks in MongoDB
Towards the end of 2020, a new vulnerability in MongoDB was found and published. The vulnerability ...
Read More
CVE-2023-29383: Abusing Linux chfn to Misrepresent /etc/passwd
A little bit of background for those not familiar with chfn…
Read MoreDeobfuscating the Recent Emotet Epoch 4 Macro
In early March, one of the notorious botnets, Emotet, resumed its spamming activities after a ...
Read MoreRilide: A New Malicious Browser Extension for Stealing Cryptocurrencies
Trustwave SpiderLabs uncovered a new strain of malware that it dubbed Rilide, which targets ...
Read MoreTrustwave Action Response: Supply Chain Attack Using 3CX PABX Software
Overview On March 29, a massive supply chain compromise in 3CX software resulted in malware being ...
Read MoreAnonymous Sudan: Religious Hacktivists or Russian Front Group?
The Trustwave SpiderLabs research team has been tracking a new threat group calling itself ...
Read More2023 Tax Scam Emails Exposed: Unmasking Deceptive Trends
Tax season is a busy time of year for taxpayers and threat actors. Consumers and businesses focus ...
Read MoreChatGPT: The Right Tool for the Job?
Since it was first released to the public late last year, ChatGPT has successfully captured the ...
Read MoreOneNote Spear-Phishing Campaign
Trustwave SpiderLabs “noted” in Part 1 and Part 2 of our OneNote research that OneNote has been ...
Read MoreA Noteworthy Threat: How Cybercriminals are Abusing OneNote – Part 1
Introduction Threat actors are taking advantage of Microsoft OneNote's ability to embed files and ...
Read MoreA Noteworthy Threat: How Cybercriminals are Abusing OneNote – Part 2
In part one, we examined how threat actors abuse a OneNote document to install an infostealer. Part ...
Read MoreNetwork Map NMAP Meets ChatGPT
We’ve now seen a number of different use cases for ChatGPT from marketing, sales, software ...
Read MoreHTML Smuggling: The Hidden Threat in Your Inbox
Last October, Trustwave SpiderLabs blogged about the use and prevalence of HTML email attachments ...
Read MoreMoney Lover App Vulnerability Exposes Personal Info
An information disclosure vulnerability has been identified in Money Lover, a finance tracking ...
Read MoreVulnerability Causing Deletion of All Users in CrushFTP Admin Area
During a recent penetration test, Trustwave SpiderLabs researchers discovered a weak input ...
Read MoreCVE-2022-43704 - Capture-Replay Vulnerability in Sinilink XY-WFT1 Thermostat
Trustwave SpiderLabs has found a vulnerability in the Sinilink XY-WFT1 Remote WiFi home Thermostat. ...
Read More2022 Year in Review: Ransomware
With 2022 having just ended, let's take a look back at the year in ransomware. With the average ...
Read MoreMalicious Macros Adapt to Use Microsoft Publisher to Push Ekipa RAT
After Microsoft announced this year that macros from the Internet will be blocked by default in ...
Read MoreChatGPT: Emerging AI Threat Landscape
ChatGPT has been available to the public since November 30, 2022. Since then, it has made headlines ...
Read MoreTrustwave Action Response: Zero-Day Vulnerability in Citrix ADC (CVE-2022-27518)
On Tuesday, December 13, a joint announcement from the United States NSA and Citrix announced a ...
Read MoreMeta-Phish: Facebook Infrastructure Used in Phishing Attack Chain
Meta has two of the largest social media platforms today, Facebook and Instagram. These platforms ...
Read MoreTrojanized OneNote Document Leads to Formbook Malware
Cybercriminals have long used Microsoft documents to pass along malware and they are always ...
Read MoreGoing Mobile: BEC Attacks Are Moving Beyond Email
Recently, we’ve noticed an increase in user reports of SMS-based Business Email Compromise (BEC) ...
Read MoreBypassing 2FA Authentication with Evilginx2
Due to the increasing number of cyberattacks, particularly zero days, organizations are scrambling ...
Read More‘Tis the Season for Online Shopping and Phishing Scams
The 2022 holiday shopping season is here. Retailers’ discounts are kicking off early, and shoppers ...
Read MoreKillnet Claims Attacks Against Starlink, Whitehouse.gov, and United Kingdom Websites
Pro-Russian threat actor group Killnet claims to have launched DDoS attacks against Starlink and ...
Read MoreEvolution of the SOC – From the Dark Ages to Enlightenment, shifting to an agile threat informed cyber defense program
Evolution of the SOC – From the Dark Ages to Enlightenment, shifting to an agile threat informed ...
Read MoreAutomating RDS Security Via Boto3 (AWS API)
When it comes to security in AWS, there is the shared responsibility model for AWS services, which ...
Read More