Exploit / PoCcritical
From summer camp to grind season
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-55177 | Incorrect Authorization in WhatsApp Linked-Device Sync Used in Targeted Spyware Attacks | 5.4 | 14% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 2915b3f8b703eb744fc54c81f4a9c67f | d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507 MD5: 2915b3f8b703eb744fc54c81f4a9c67f VirusTotal: https://www.virustotal.com/gui/file/9f1f11a708d |
| md5 | 85bbddc502f7b10871621fd460243fbc | af8e949160ee2731802523e0c76fea87adf00ee7fe9567c3cec610 MD5: 85bbddc502f7b10871621fd460243fbc VirusTotal: https://www.virustotal.com/gui/file/41f14d86bca |
| md5 | 8c69830a50fb85d8a794fa46643493b2 | 1eaefffd2f2c79b5c26a2648b8d3c19a22cadf35453455ff08ead0 MD5: 8c69830a50fb85d8a794fa46643493b2 VirusTotal: https://www.virustotal.com/gui/file/c67b03c0a91 |
| md5 | 906282640ae3088481d19561c55025e4 | 6765881f81c36efacad93c20f3296be3ff4a56f48c6aa2dcd3ac08 MD5: 906282640ae3088481d19561c55025e4 VirusTotal: https://www.virustotal.com/gui/file/83748e8d6f6 |
| md5 | bfc168a01a2b0f3cd11bf4bccd5e84a1 | ca7bb699ce0b48240b7559a9ac5b0ba260fb78b81ec53249548f62 MD5: bfc168a01a2b0f3cd11bf4bccd5e84a1 VirusTotal: https://www.virustotal.com/gui/file/186aa2c281c |
| sha256 | 186aa2c281ca7bb699ce0b48240b7559a9ac5b0ba260fb78b81ec53249548f62 | N/A Detection Name: PUA.Win.Dropper.Generic::1201 SHA 256: 186aa2c281ca7bb699ce0b48240b7559a9ac5b0ba260fb78b81ec53249548f62 MD5: bfc168a01a2b0f3cd11bf4bccd5e84a1 VirusTotal: https://w |
| sha256 | 41f14d86bcaf8e949160ee2731802523e0c76fea87adf00ee7fe9567c3cec610 | ware files from Talos telemetry over the past week SHA 256: 41f14d86bcaf8e949160ee2731802523e0c76fea87adf00ee7fe9567c3cec610 MD5: 85bbddc502f7b10871621fd460243fbc VirusTotal: https://w |
| sha256 | 83748e8d6f6765881f81c36efacad93c20f3296be3ff4a56f48c6aa2dcd3ac08 | lls Detection Name: Win64.Application.Agent.W2MG0A SHA 256: 83748e8d6f6765881f81c36efacad93c20f3296be3ff4a56f48c6aa2dcd3ac08 MD5: 906282640ae3088481d19561c55025e4 VirusTotal: https://w |
| sha256 | 9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507 | archive Detection Name: Win.Worm.Bitmin-9847045-0 SHA 256: 9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507 MD5: 2915b3f8b703eb744fc54c81f4a9c67f VirusTotal: https://w |
| sha256 | c67b03c0a91eaefffd2f2c79b5c26a2648b8d3c19a22cadf35453455ff08ead0 | duct: N/A Detection Name: Win.Worm.Coinminer::1201 SHA 256: c67b03c0a91eaefffd2f2c79b5c26a2648b8d3c19a22cadf35453455ff08ead0 MD5: 8c69830a50fb85d8a794fa46643493b2 VirusTotal: https://w |
From the original article
4 min read at blog.talosintelligence.com
Welcome to this week’s edition of the Threat Source newsletter. So this is how Summer Camp 2025 ends, not with a bang but a whimper. We’ve put the summer behind us and are moving on to the next phase of the year, where we all put our noses down and grind from here to the holiday season.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.