JavaScript – Page 2 – PossibleThreat Articles

Multi-Staged JSOutProx RAT Targets Indian Co-operative Banks and Finance Companies

February 2, 2022 0 Comments #attacks, #jsoutprox, bank, cybersecurity, india, JavaScript, malware, news, rat

Credit to Author: Sameer Patil| Date: Thu, 21 Oct 2021 12:38:32 +0000

Quick Heal Security Labs has been monitoring various attack campaigns using JSOutProx RAT against different SMBs in…

The post Multi-Staged JSOutProx RAT Targets Indian Co-operative Banks and Finance Companies appeared first on Quick Heal Blog | Latest computer security news, tips, and advice.

Security Sophos

Tor browser fixes bug that allows JavaScript to run when disabled

March 17, 2020 0 Comments anonymity, browser privacy, firefox, java, JavaScript, noscript, Privacy, security threats, the onion router, Tor, tor browser, vulnerability, Web Browsers

Credit to Author: John E Dunn| Date: Tue, 17 Mar 2020 12:16:27 +0000

The Tor browser has a bug that could allow JavaScript to execute on websites even when users think they’ve disabled it for maximum anonymity.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/es39u8LUhmk” height=”1″ width=”1″ alt=””/>

MalwareBytes Security

Rocket Loader skimmer impersonates CloudFlare library in clever scheme

March 17, 2020 0 Comments https, JavaScript, Magecart, skimmer, skimming, Threat analysis

Credit to Author: Jérôme Segura| Date: Tue, 10 Mar 2020 15:46:13 +0000

URLs can be deceiving, but the one used to mimic CloudFlare’s Rocket Loader in the latest Magecart attack takes it to a whole new level.

Categories:

Threat analysis

Tags: HTTPS JavaScript Magecart skimmer skimming

Security Sophos

XSS plugin vulnerabilities plague WordPress users

March 3, 2020 0 Comments async, cross-site scripting, flexible checkout fields, JavaScript, plugins, security threats, vulnerability, woocommerce, Wordpress, WordPress plugin, XSS

Credit to Author: Danny Bradbury| Date: Tue, 03 Mar 2020 10:44:44 +0000

Thousands of active WordPress plugins have been hit with a swathe of XSS vulnerabilities that could give attackers complete control of the site.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/Bjh4-1ye-9E” height=”1″ width=”1″ alt=””/>

MalwareBytes Security

Domen toolkit gets back to work with new malvertising campaign

February 28, 2020 0 Comments buren ransomware, Domen, domen toolkit, intelrapid cryptominer, JavaScript, malicious websites, malvertising, malvertising campaigns, smoke loader, Social engineering, Threat analysis, toolkit, vidar, vidar stealer

Credit to Author: Threat Intelligence Team| Date: Fri, 28 Feb 2020 17:54:18 +0000

We describe the latest malvertising campaign that uses Domen, an advanced social engineering toolkit.

Categories:

Threat analysis

Tags: buren ransomware Domen domen toolkit intelrapid cryptominer JavaScript malicious websites malvertising malvertising campaigns smoke loader Social Engineering toolkit Vidar vidar stealer

Security Sophos

Npm patches two serious bugs

December 16, 2019 0 Comments cve-2019-16775, cve-2019-16776, cve-2019-16777, java, JavaScript, javascript packages, npm, Patch, Patches, security threats, vulnerability

Credit to Author: Danny Bradbury| Date: Mon, 16 Dec 2019 10:57:26 +0000

JavaScript package users have been warned to update due to a bug that could enable an attacker to infect them with malicious applications.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/Yb7pRyvF7Uo” height=”1″ width=”1″ alt=””/>

MalwareBytes Security

Magecart Group 4: A link with Cobalt Group?

October 3, 2019 0 Comments carbanak, colbalt group, credit cards, data theft, ecommerce, Fin7, group 4, Hyas, JavaScript, Magecart, skimmers, threat actor, threat actor group, threat actors, Threat analysis

Credit to Author: Threat Intelligence Team| Date: Thu, 03 Oct 2019 15:00:00 +0000

Malwarebytes threat intel partnered with security firm HYAS to connect the dots between Magecart Group 4 and the advanced threat group Cobalt.

Categories:

Threat analysis

Tags: carbanak colbalt group credit cards data theft ecommerce FIN7 group 4 HYAS JavaScript Magecart skimmers threat actor threat actor group threat actors

(Read more…)

The post Magecart Group 4: A link with Cobalt Group? appeared first on Malwarebytes Labs.

MalwareBytes Security

Magecart criminals caught stealing with their poker face on

August 20, 2019 0 Comments drupal, JavaScript, Magecart, magento, poker, skimmer, Threat analysis

Credit to Author: Jérôme Segura| Date: Tue, 20 Aug 2019 15:00:38 +0000

This blog post details the curious case of a web skimmer encountered in a poker application.

Categories:

Threat analysis

Tags: drupal JavaScript Magecart magento poker skimmer

MalwareBytes Security

A week in security (June 24 – 30)

July 19, 2019 0 Comments A week in security, atm attacks, atm fraud, atm malware strains, ATM scam, Azure, cryptocurrency scams, facial recognition, fake jquery, greenflas, Internet of Things, IoT, JavaScript, Massachusettes, Microsoft Azure, scareware, Slack, Slack outage, Somerville, spyware, Stalkerware, Yandex

Credit to Author: Malwarebytes Labs| Date: Mon, 01 Jul 2019 17:02:56 +0000

A roundup of cybersecurity news from June 24–30, including top malicious web campaigns, updates on the GreenFlash Sundown exploit, a Malwarebytes initiative to double down on stalkerware detection and awareness, and more.

Categories:

A week in security

Tags: atm attacks atm fraud atm malware strains ATM scam Azure cryptocurrency scams facial recognition fake jquery greenflas Internet of Things IoT JavaScript Massachusettes Microsoft Azure scareware Slack Slack outage Somerville spyware stalkerware Yandex

(Read more…)

The post A week in security (June 24 – 30) appeared first on Malwarebytes Labs.