Cybersecurity considerations to have when shopping for holiday gifts
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-42917+1 related CVE | WebKit Memory Corruption in Apple iOS, macOS, and Safari Enables Arbitrary Code Execution | 8.8 group max | 9% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 040cd888e971f2872d6d5dafd52e6194 | b6dd56bc787fda46e6f4240aaa0353ead1e3071224d454038a545e MD5: 040cd888e971f2872d6d5dafd52e6194 Typical Filename: streamer.exe Claimed Product: Ultra Virus |
| md5 | 0e4c49327e3be816022a233f844a5731 | 77c58ac12e747da09d2810fd5ca611f56c0c900578bf750cab56b7 MD5: 0e4c49327e3be816022a233f844a5731 Typical Filename: aact.exe Claimed Product: AAct x86 Detect |
| md5 | 200206279107f4a2bb1832e3fcd7d64c | 8a912d4322b45ea64d69bb3add4d818fd1eb7723260b11d76a138a MD5: 200206279107f4a2bb1832e3fcd7d64c Typical Filename: lsgkozfm.bat Claimed Product: N/A Detecti |
| md5 | 2cfc15cb15acc1ff2b2da65c790d7551 | 7478cba56ebbcc7a695cae2609010a897d766ff578a4260c2ac9cf MD5: 2cfc15cb15acc1ff2b2da65c790d7551 Typical Filename: rcx4d83.tmp Claimed Product: N/A Detectio |
| md5 | ef6ff172bf3e480f1d633a6c53f7a35e | a08dd59e87de24590b938045f14e693a43a83b81ce8531127eb440 MD5: ef6ff172bf3e480f1d633a6c53f7a35e Typical Filename: iizbpyilb.bat Claimed Product: N/A Detect |
| sha256 | 4c3c7be970a08dd59e87de24590b938045f14e693a43a83b81ce8531127eb440 | Product: N/A Detection Name: Win.Dropper.Scar::tpd SHA 256: 4c3c7be970a08dd59e87de24590b938045f14e693a43a83b81ce8531127eb440 MD5: ef6ff172bf3e480f1d633a6c53f7a35e Typical Filename: iiz |
| sha256 | 5e537dee6d7478cba56ebbcc7a695cae2609010a897d766ff578a4260c2ac9cf | med Product: N/A Detection Name: Trojan.Agent.DDOH SHA 256: 5e537dee6d7478cba56ebbcc7a695cae2609010a897d766ff578a4260c2ac9cf MD5: 2cfc15cb15acc1ff2b2da65c790d7551 Typical Filename: rcx |
| sha256 | 77c2372364b6dd56bc787fda46e6f4240aaa0353ead1e3071224d454038a545e | 6 Detection Name: PUA.Win.Tool.Kmsauto::in03.talos SHA 256: 77c2372364b6dd56bc787fda46e6f4240aaa0353ead1e3071224d454038a545e MD5: 040cd888e971f2872d6d5dafd52e6194 Typical Filename: str |
| sha256 | 8664e2f59077c58ac12e747da09d2810fd5ca611f56c0c900578bf750cab56b7 | oduct: N/A Detection Name: Win.Dropper.Pykspa::tpd SHA 256: 8664e2f59077c58ac12e747da09d2810fd5ca611f56c0c900578bf750cab56b7 MD5: 0e4c49327e3be816022a233f844a5731 Typical Filename: aac |
| sha256 | bea312ccbc8a912d4322b45ea64d69bb3add4d818fd1eb7723260b11d76a138a | ware files from Talos telemetry over the past week SHA 256: bea312ccbc8a912d4322b45ea64d69bb3add4d818fd1eb7723260b11d76a138a MD5: 200206279107f4a2bb1832e3fcd7d64c Typical Filename: lsg |
From the original article
8 min read at blog.talosintelligence.com
As I wrote about last week, there are holiday shopping-related scams already popping up all over the place. But another aspect of security that many shoppers don’t consider this time of year is the security of the products they’re buying, even through a legitimate online marketplace.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.