threat research – Page 15 – PossibleThreat Articles

Security Sophos

3CX users under DLL-sideloading attack: What you need to know

March 29, 2023 0 Comments 3cx, dll sideloading, ioc hunting, threat research

Credit to Author: Greg Iddon| Date: Thu, 30 Mar 2023 01:39:11 +0000

A Trojanized version of the popular VOIP/PBX software is in the news; here’s what hunters and defenders are doing

Security Sophos

Observing OWASSRF Exchange Exploitation… still

March 15, 2023 0 Comments :proxynotshell, cve-202-41082, cve-2022-41080, exchange server, owa, owassrf, play, threat research

Credit to Author: Angela Gunn| Date: Wed, 15 Mar 2023 16:45:56 +0000

ProxyNotShell continues to make waves as November 2022 fixes fail to contain SSRF tactic

Security Sophos

A little something for everyone on a patchwork Patch Tuesday

March 14, 2023 0 Comments cve-2023-23392, cve-2023-23397, cve-2023-23411, cve-2023-24880, dynamics, mark of the web, Microsoft, Microsoft Office, Microsoft Windows, Patch Tuesday, postscript, threat research

Credit to Author: Angela Gunn| Date: Tue, 14 Mar 2023 18:58:33 +0000

Even MacOS, iOS, and Android get a piece of the pie in March

Security Sophos

A border-hopping PlugX USB worm takes its act on the road

March 9, 2023 0 Comments dll side-load, featured, plugx, sophos x-ops, threat research, usb worm

Credit to Author: Gabor Szappanos| Date: Thu, 09 Mar 2023 11:00:02 +0000

Borne aloft by DLL sideloading, a far-flung infection touches ten time zones

Security Sophos

Sour Grapes: stomping on a Cambodia-based “pig butchering” scam

February 28, 2023 0 Comments cryptocurrency fraud, cryptorom, fake apps, featured, pigbutchering, shazhupan, threat research

Credit to Author: gallagherseanm| Date: Tue, 28 Feb 2023 11:00:10 +0000

A text message leads to discovery of a vast scam infrastructure run by Chinese cyber-criminals.

Security Sophos

A diverse set of fixes in February’s Patch Tuesday release

February 14, 2023 0 Comments 3d builder, Azure, cve-2023-21689, cve-2023-21690, cve-2023-21692, cve-2023-21715, cve-2023-21716, cve-2023-21808, cve-2023-21809, cve-2023-21812, cve-2023-21815, cve-2023-21823, cve-2023-23376, cve-2023-23381, dynamics, exchange, Microsoft, Microsoft Office, microsoft windows defender, mssql, odbc, Patch Tuesday, peap, postscript, sophos x-ops, threat research, visual studio, Windows

Credit to Author: Matt Wixey| Date: Tue, 14 Feb 2023 19:23:22 +0000

Patches for Power BI, PEAP, PostScript, Exchange, and 3D Builder

Security Sophos

Fool’s Gold: dissecting a fake gold market pig-butchering scam

February 13, 2023 0 Comments featured, metatrader4, pigbutchering, shazhupan, threat research

Credit to Author: gallagherseanm| Date: Mon, 13 Feb 2023 11:00:03 +0000

Scammers use counterfeit bank website, hijacked legitimate app to defraud and steal identifying information.

Security Sophos

Qakbot mechanizes distribution of malicious OneNote notebooks

February 6, 2023 0 Comments .one, applicationreject, complaintcopy, featured, malware, onenote, qakbot, security operations, threat research

Credit to Author: Andrew Brandt| Date: Mon, 06 Feb 2023 18:17:20 +0000

A large-scale “QakNote” attack deploys malicious .one files as a novel infection vector

Security Sophos

Fraudulent “CryptoRom” trading apps sneak into Apple and Google app stores

February 1, 2023 0 Comments cryptocurrency fraud, cryptorom, fake apps, featured, ios fake app, pigbutchering, shazhupan, sophos x-ops, threat research

Credit to Author: Jagadeesh Chandraiah| Date: Wed, 01 Feb 2023 11:00:48 +0000

Using changing remote content, apps slide by official review process to deliver fraud through the Apple App Store and Google Play Store.

Security Sophos

January 2023 patch roundup: Microsoft tees up 98 updates

January 10, 2023 0 Comments 3d builder, adobe reader, cve-2023-21531, cve-2023-21552, cve-2023-21559, cve-2023-21674, cve-2023-21678, cve-2023-21743, exp/2321552-a, exp/2321674-a, featured, Microsoft, Patch Tuesday, sharepoint, sophos x-ops, threat research, Windows, windows 7, x-ops

Credit to Author: Angela Gunn| Date: Wed, 11 Jan 2023 02:05:40 +0000

Adobe greets the new year with patches for 18 vulns in Reader, Acrobat, and others; sun sets on the last of Win7, 8, RT support