Threat Source newsletter (Oct. 28, 2021)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-41733 | Oppia 3.1.4 does not verify that certain URLs are valid before navigating to them | 6.1 | <1% | ||
| CVE-2021-42013 | Path Traversal and RCE in Apache HTTP Server (follow-up to CVE-2021-41773) | 9.8 | 100% | KEVRansomwarePoC ×6 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 3c3046f640f7825c720849aaa809c963 | f9ba37316db59a6ef67b15ef0f49fcd79cf2420989b9e4a19ffc2a MD5: 3c3046f640f7825c720849aaa809c963 Typical Filename: app.exe Claimed Product: N/A Detection Na |
| md5 | 3f75eb823cd1a73e4c89185fca77cb38 | 0b74746b02a4ee1a5820fa3074f43bec2988737005d2562a90cd34 MD5: 3f75eb823cd1a73e4c89185fca77cb38 Typical Filename: signup.png Claimed Product: N/A Detection |
| md5 | 6ea750c9d69b7db6532d90ac0960e212 | f8ea3090c2460a5f7d92a5a49e7fa040bf26659ec2f7c442dda762 MD5: 6ea750c9d69b7db6532d90ac0960e212 VirusTotal: Typical Filename: deps.zip Claimed Product: N/A |
| md5 | ee62e8f42ed70e717b2571c372e9de9a | 2f3bade35e03b6b0554a80b1563f2c167d9064263845653d912ec6 MD5: ee62e8f42ed70e717b2571c372e9de9a Typical Filename: lHe Claimed Product: N/A Detection Name: |
| md5 | fe3659119e683e1aa07b2346c1f215af | d55c45808f2fa8a5b398b0de18e5dd57af00265e42c822fb6938e2 MD5: fe3659119e683e1aa07b2346c1f215af Typical Filename: SqlBase.exe Claimed Product: SqlServerWor |
| sha256 | 1487f122c92f3bade35e03b6b0554a80b1563f2c167d9064263845653d912ec6 | ks.Runner Detection Name: W32.8639FD3EF8-95.SBX.TG SHA 256: 1487f122c92f3bade35e03b6b0554a80b1563f2c167d9064263845653d912ec6 MD5: ee62e8f42ed70e717b2571c372e9de9a Typical Filename: lHe |
| sha256 | 3993aa1a1cf9ba37316db59a6ef67b15ef0f49fcd79cf2420989b9e4a19ffc2a | 356 - 58361 Most prevalent malware files this week SHA 256: 3993aa1a1cf9ba37316db59a6ef67b15ef0f49fcd79cf2420989b9e4a19ffc2a MD5: 3c3046f640f7825c720849aaa809c963 Typical Filename: app |
| sha256 | 8639fd3ef8d55c45808f2fa8a5b398b0de18e5dd57af00265e42c822fb6938e2 | A Detection Name: Win.Dropper.Generic::231945.in02 SHA 256: 8639fd3ef8d55c45808f2fa8a5b398b0de18e5dd57af00265e42c822fb6938e2 MD5: fe3659119e683e1aa07b2346c1f215af Typical Filename: Sql |
| sha256 | d339e195ca0b74746b02a4ee1a5820fa3074f43bec2988737005d2562a90cd34 | Detection Name: Auto.E5044D5AC2.242358.in07.Talos SHA 256: d339e195ca0b74746b02a4ee1a5820fa3074f43bec2988737005d2562a90cd34 MD5: 3f75eb823cd1a73e4c89185fca77cb38 Typical Filename: sig |
| sha256 | e5044d5ac2f8ea3090c2460a5f7d92a5a49e7fa040bf26659ec2f7c442dda762 | oduct: N/A Detection Name: Auto.3993AA.242356.in02 SHA 256: e5044d5ac2f8ea3090c2460a5f7d92a5a49e7fa040bf26659ec2f7c442dda762 MD5: 6ea750c9d69b7db6532d90ac0960e212 VirusTotal: Typical F |
From the original article
4 min read at blog.talosintelligence.com
Most people know about chicken and waffles. But what about squirrel and waffles? They may not be the most appetizing brunch, but they are teaming up for one heck of a spam campaign.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.