Pinterest: Abused as Dead Drop Resolver by PINHOLE RAT
Pinterest is a social media platform that is being abused by PINHOLE RAT as a dead drop resolver to obtain C2 server…
Category: Cyber Products
Cybersecurity products, tools, platforms and software categories.
SurveyMonkey: Abused as Dead Drop Resolver by PINHOLE RAT
SurveyMonkey is an online survey platform that is being abused by PINHOLE RAT as a dead drop resolver to obtain C2 server…
unpkg: npm Mirror Abused for Phishing
unpkg is a content delivery network for npm packages. Threat actors have abused it to host malicious HTML files that render as…
KeyVal Used as Dead Drop Resolver in Phishing Campaign
KeyVal is a free public key-value store that developers use via REST API. In this campaign, it was abused as a dead…
Google Chrome Safe Browsing Blocks Typosquat Domain
Google Chrome's Safe Browsing blocklist was used to block a typosquatted Microsoft login domain used in the campaign, prompting the threat actor…
miniOrange SAML 2.0 Single Sign On Plugin
The miniOrange SAML 2.0 Single Sign On plugin is a WordPress plugin that enables SAML-based authentication. It is affected by two critical…
Oracle HTTP Server: Enterprise Web Server
Oracle HTTP Server is a web server component of Oracle Fusion Middleware, based on Apache, that provides HTTP and HTTPS services for…
Oracle WebLogic Server: Enterprise Java Application Server
Oracle WebLogic Server is a Java EE application server used for deploying and managing enterprise applications. It is a common target for…
Oracle WebLogic Server Proxy Plug-in: Web Server Integration
Oracle WebLogic Server Proxy Plug-in enables integration between web servers and WebLogic Server, forwarding requests to the application server. It is affected…
Lovable: AI-Powered Website Builder
Lovable is an AI-powered website builder that was used to create a fake Minecraft client site distributing Weedhack malware. Its accessibility lowers…