Threat Report | Stinner IT Solutions

RuRAT Malware Used in Spear-phishing Attacks Against US media Organizations

by | 8. Mar 2022 | Threat Report

FortiGuard Labs is aware of a report that RuRAT malware was distributed in the recent spear-phishing attack against media organizations in the United States. While the tactic used in this attack is not sophisticated, the installed RuRAT malware provides the attacker a...

F5 Releases August 2021 Security Advisory Including Critical CVE-2021-23031

by | 1. Mar 2022 | Threat Report

FortiGuard Labs is aware that F5 released a security advisory on August 24th about vulnerabilities affecting multiple versions of BIG-IP and BIG-IQ. The US Cybersecurity and Infrastructure Security Agency (CISA) published an advisory the next day urging the customers...

ProxyToken (CVE-2021-33766): Authentication bypass in Microsoft Exchange Server

by | 1. Mar 2022 | Threat Report

UPDATE 9/17 – An IPS signature has been released in definitions (18.160) as “MS.Exchange.Server.SecurityToken.Authentication.Bypass” FortiGuard Labs is aware of a new disclosure dubbed PROXYTOKEN, which is an authentication bypass in Microsoft...

Previously Unseen Backdoor Bvp47 Potentially Victimized Global Targets

by | 1. Mar 2022 | Threat Report

FortiGuard Labs is aware of a report by Pangu Lab that a new Linux backdoor malware that reportedly belongs to the Equation group was used to potentially compromise more than 200 organizations across over 40 countries around the globe. The Equation group is regarded...

Kernel Level Rat “Daxin” Discovered

by | 1. Mar 2022 | Threat Report

FortiGuard Labs is aware of a newly discovered backdoor dubbed Daxin. Discovered by Symantec, this backdoor allows an attacker to gather and perform various command and control actions and data exfiltration on victim machines. Because of our partnership with the Cyber...

Remote Utilities Software Distributed in Ukraine via Fake Evacuation Plan Email

by | 1. Mar 2022 | Threat Report

FortiGuard Labs is aware that a copy of Remote Manipulator System (RMS) was submitted from Ukraine to VirusTotal on February 28th, 2022. The RMS is a legitimate remote administration tool that allows a user to remotely control another computer. The file name is in...

« Older Entries

Next Entries »