Ransomwarecritical
Is it bad to have a major security incident on your résumé? (Seriously I don’t know)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-40044 | Unauthenticated Deserialization RCE in Progress WS_FTP Server | 8.8 | 90% | KEVRansomwarePoC ×2 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 93fefc3e88ffb78abb36365fa5cf857c | 81591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 MD5: 93fefc3e88ffb78abb36365fa5cf857c Typical Filename: Wextract Claimed Product: Internet Explor |
| md5 | 9403425a34e0c78a919681a09e5c16da | 3fe020f1dbb1caafde7180fd9216dcbf0ea147675ec287287f86aa MD5: 9403425a34e0c78a919681a09e5c16da Typical Filename: vincpsarzh.exe Claimed Product: N/A Detec |
| md5 | a087b2e6ec57b08c0d0750c60f96a74c | e7e4da97a0ff8e1a0d4840c882569d47b8fab8fb187ac2b475636c MD5: a087b2e6ec57b08c0d0750c60f96a74c Typical Filename: AAct.exe Claimed Product: N/A Detection N |
| md5 | e9a6b1346d1a2447cabb980f3cc5dd27 | 71e3ee6a35c8fef6da7ab26a93ba36b80279625328aaf184435efa MD5: e9a6b1346d1a2447cabb980f3cc5dd27 Typical Filename: профиль 10 класс.exe Claimed Product: N/A |
| md5 | ef6ff172bf3e480f1d633a6c53f7a35e | a08dd59e87de24590b938045f14e693a43a83b81ce8531127eb440 MD5: ef6ff172bf3e480f1d633a6c53f7a35e Typical Filename: iizbpyilb.bat Claimed Product: N/A Detect |
| sha256 | 4c3c7be970a08dd59e87de24590b938045f14e693a43a83b81ce8531127eb440 | Product: N/A Detection Name: Win.Dropper.Scar::tpd SHA 256: 4c3c7be970a08dd59e87de24590b938045f14e693a43a83b81ce8531127eb440 MD5: ef6ff172bf3e480f1d633a6c53f7a35e Typical Filename: iiz |
| sha256 | 7f66d4580871e3ee6a35c8fef6da7ab26a93ba36b80279625328aaf184435efa | med Product: N/A Detection Name: Trojan.Agent.DDOH SHA 256: 7f66d4580871e3ee6a35c8fef6da7ab26a93ba36b80279625328aaf184435efa MD5: e9a6b1346d1a2447cabb980f3cc5dd27 Typical Filename: про |
| sha256 | 975517668a3fe020f1dbb1caafde7180fd9216dcbf0ea147675ec287287f86aa | ware files from Talos telemetry over the past week SHA 256: 975517668a3fe020f1dbb1caafde7180fd9216dcbf0ea147675ec287287f86aa MD5: 9403425a34e0c78a919681a09e5c16da Typical Filename: vin |
| sha256 | e12b6641d7e7e4da97a0ff8e1a0d4840c882569d47b8fab8fb187ac2b475636c | ion Name: PUA.Win.Trojan.Generic::85.lp.ret.sbx.tg SHA 256: e12b6641d7e7e4da97a0ff8e1a0d4840c882569d47b8fab8fb187ac2b475636c MD5: a087b2e6ec57b08c0d0750c60f96a74c Typical Filename: AAc |
| sha256 | e4973db44081591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 | d Product: N/A Detection Name: Application_Blocker SHA 256: e4973db44081591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 MD5: 93fefc3e88ffb78abb36365fa5cf857c Typical Filename: Wex |
From the original article
7 min read at blog.talosintelligence.com
Welcome to this week’s edition of the Threat Source newsletter. It’s Cybersecurity Awareness Month, which means it’s time to hug your nearest defender — they’re probably tired, could be facing burnout or just have had too much coffee today. What makes the cybersecurity landscape even more fraught right now is that qualified analysts, researchers and security practitioners are having a hard time finding work.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.