||||The.Fischerman.CH

Microsoft Equation Editor, which is a Microsoft Office component, contains a stack buffer overflow vulnerability that enables remote code execution on a vulnerable system. The component was compiled on November 9, 2000, over 17 years ago. Without any further recompilation, it was used in all currently upported versions of Microsoft Office. Microsoft Equation Editor is an out-of-process COM server that is hosted by eqnedt32.exe, meaning it runs as it’s own process and can accept commands from other processes.

Source ->

— the.Fischerman.ch
(@FischermanCH)

 

Nearly 5,500 WordPress sites are infected with a malicious script that logs keystrokes and sometimes loads an in-browser cryptocurrency miner.

Source ->

— the.Fischerman.ch
(@FischermanCH)

 

Die Tastatur-App “Ai.Type” hat sensible Daten von etwa 31 Millionen Nutzern ausgespäht und ungeschützt ins Netz gestellt. Andere Apps derselben Entwickler sammeln offenbar noch mehr Daten.

Source ->

— the.Fischerman.ch
(@FischermanCH)

 

Eine Armee von infizierten Computern, ferngesteuert von Kriminellen, verbreitete auf der ganzen Welt eine Schadsoftware namens “Andromeda”. Nun ist deutschen Ermittlern ein entscheidender Schlag gelungen.

Source ->

— the.Fischerman.ch
(@FischermanCH)

 

Palo Alto Networks Unit 42 has identified attacks with a new custom Remote Access Trojan (RAT) called UBoatRAT. The initial version of the RAT, found in May of 2017, was simple HTTP backdoor that uses a public blog service in Hong Kong and a compromised web server in Japan for command and control. The developer soon added various new features to the code and released an updated version in June. The attacks with the latest variants we found in September have following characteristics.

Source ->

— the.Fischerman.ch
(@FischermanCH)