Trick, treat, repeat
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-59287 | Deserialization RCE in Microsoft WSUS (Windows Server) | 9.8 | 100% | KEVPoC | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 1f7e01a3355b52cbc92c908a61abf643 | 7cfe2f459d64ea4af346e69177e150df1cd23aad1904f5fd41f44a MD5: 1f7e01a3355b52cbc92c908a61abf643 Talos Rep: https://talosintelligence.com/talos_file_reputat |
| md5 | 2915b3f8b703eb744fc54c81f4a9c67f | d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507 MD5: 2915b3f8b703eb744fc54c81f4a9c67f Talos Rep: https://talosintelligence.com/talos_file_reputat |
| md5 | 85bbddc502f7b10871621fd460243fbc | af8e949160ee2731802523e0c76fea87adf00ee7fe9567c3cec610 MD5: 85bbddc502f7b10871621fd460243fbc Talos Rep: https://talosintelligence.com/talos_file_reputat |
| md5 | aac3165ece2959f39ff98334618d10d9 | 670823c83099ea01d24d6d3ae8fef027f01a4ddac14f123b1c9974 MD5: aac3165ece2959f39ff98334618d10d9 Talos Rep: https://talosintelligence.com/talos_file_reputat |
| md5 | bf9672ec85283fdf002d83662f0b08b7 | dcd9e964378760fb6aca86a23622045bca851d8f3ab49ec33978fe MD5: bf9672ec85283fdf002d83662f0b08b7 Talos Rep: https://talosintelligence.com/talos_file_reputat |
| sha256 | 41f14d86bcaf8e949160ee2731802523e0c76fea87adf00ee7fe9567c3cec610 | 03b84.html Detection Name: W32.C0AD494457-95.SBX.TG SHA256: 41f14d86bcaf8e949160ee2731802523e0c76fea87adf00ee7fe9567c3cec610 MD5: 85bbddc502f7b10871621fd460243fbc Talos Rep: https://ta |
| sha256 | 96fa6a7714670823c83099ea01d24d6d3ae8fef027f01a4ddac14f123b1c9974 | 43fbc.exe Detection Name: W32.41F14D86BC-100.SBX.TG SHA256: 96fa6a7714670823c83099ea01d24d6d3ae8fef027f01a4ddac14f123b1c9974 MD5: aac3165ece2959f39ff98334618d10d9 Talos Rep: https://ta |
| sha256 | 9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507 | lware files from Talos telemetry over the past week SHA256: 9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507 MD5: 2915b3f8b703eb744fc54c81f4a9c67f Talos Rep: https://ta |
| sha256 | c0ad494457dcd9e964378760fb6aca86a23622045bca851d8f3ab49ec33978fe | leanup.bat Detection Name: W32.D933EC4AAF-90.SBX.TG SHA256: c0ad494457dcd9e964378760fb6aca86a23622045bca851d8f3ab49ec33978fe MD5: bf9672ec85283fdf002d83662f0b08b7 Talos Rep: https://ta |
| sha256 | d933ec4aaf7cfe2f459d64ea4af346e69177e150df1cd23aad1904f5fd41f44a | _1_Exe.exe Detection Name: Win.Worm.Coinminer::1201 SHA256: d933ec4aaf7cfe2f459d64ea4af346e69177e150df1cd23aad1904f5fd41f44a MD5: 1f7e01a3355b52cbc92c908a61abf643 Talos Rep: https://ta |
From the original article
5 min read at blog.talosintelligence.com
Welcome to this week’s edition of the Threat Source newsletter. This one is pretty much an updated, Halloween-themed version of my newsletter from July , including data up through Q3. October 14th has passed, so free support for Windows 10 has come to an end, leaving you with no more fixes unless you’re willing to pony up.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.