||||The.Fischerman.CH

As the name might suggest AutoSploit attempts to automate the exploitation of remote hosts. Targets can be collected automatically through Shodan, Censys or Zoomeye. But options to add your custom targets and host lists have been included as well. The available Metasploit modules have been selected to facilitate Remote Code Execution and to attempt to gain Reverse TCP Shells and/or Meterpreter sessions. Workspace, local host and local port for MSF facilitated back connections are configured by filling out the dialog that comes up before the exploit component is started

Source ->

— the.Fischerman.ch
(@FischermanCH)

 

Palo Alto Networks Unit 42 has observed a large-scale cryptocurrency mining operation that has been active for over 4 months. The operation attempts to mine the Monero cryptocurrency using the open-source XMRig utility.
Based on publicly available telemetry data via bitly, we are able to estimate that the number of victims affected by this operation is roughly around 15 million people worldwide. This same telemetry provides insights into the most heavily targeted areas involving this campaign, which impacts southeast Asia, northern Africa, and South America the most.

Source ->

— the.Fischerman.ch
(@FischermanCH)

 

Security researchers have discovered a nasty pair of Chrome and FireFox extensions that can hijack browsers, spy on users’ browsing activities and are nearly impossible to get rid of manually. According to researchers at Malwarebytes, the new malicious extension called “Tiempo en colombia en vivo” was found lurking in both the popular browsers.

Source ->

— the.Fischerman.ch
(@FischermanCH)

 

Intel has requested users stop installing its own Spectre/Malware patch after confirming the fix was causing people’s computers to shut down.
The firm says the patches, which began rolling out recently, were also resulting in unpredictable system behaviour.

Source ->

— the.Fischerman.ch
(@FischermanCH)

 

The furore around the Meltdown and Spectre processors security flaws can be confusing, but the InSpectre app is here to help.

Developed by data recovery and maintenance software firm Gideon Research, the succinctly named InSpectre app simply tells you if your PC is vulnerable to either of the CPU flaws – Meltdown and Spectre affect Intel chips, while Spectre can affect AMD processors.

Source ->

— the.Fischerman.ch
(@FischermanCH)