The Icefog APT Hits US Targets With Java Backdoor
In September 2013, we published our extensive analysis of Icefog, an APT campaign that focused on the supply chain – targeting government institutions, military contractors, maritime and ship-building groups. Icefog, also known as the “Dagger Panda” by Crowdstrike’s naming convention, infected targets mainly in South Korea and Japan. You can find our Icefog APT analysis and detailed report here. S
Endpoint Protection - Symantec Enterprise
Contributor: Lionel Payet Political news has always been one of the top topics used in targeted attacks. Last week we came across unique malicious emails targeting high-profile companies in Europe and Asia (in sectors such as finance, mining, telecom, and government). The payload is an updated version of a Java remote access tool (RAT) detected as Backdoor.Opsiness, also known as Frutas RAT. Figur
Home - Broadcom Community - Discussion Forums, Technical Docs, Ideas and Blogs
VMware Explore Registration Is Open Map your next move at the industry’s essential cloud event in Las Vegas August 26 – 29. Register Now Welcome VMware Members We are pleased to announce that VMware Communities, Carbon Black Community, Pivotal Community, and the Developer Sample Exchange will go live on Monday, 5/6. Stay tuned for updates. Read More Welcome VMware Members We are pleased to annou
Home - Broadcom Community - Discussion Forums, Technical Docs, Ideas and Blogs
VMware Explore Registration Is Open Map your next move at the industry’s essential cloud event in Las Vegas August 26 – 29. Register Now Welcome VMware Members We are pleased to announce that VMware Communities, Carbon Black Community, Pivotal Community, and the Developer Sample Exchange will go live on Monday, 5/6. Stay tuned for updates. Read More Welcome VMware Members We are pleased to annou
エフセキュアブログ : グリーティングカードを装った標的型メールに注意
グリーティングカードを装った標的型メールに注意 2013年01月30日08:00 ツイート hiroki_iwai オフィシャルコメント by：岩井 博樹 グリーティングカードを装った標的型メールが複数確認されています。 実在するサービスなので、ついクリックしてしまいそうですのでご注意ください！ 今回、確認したケースでは記載されたURLへアクセスしますと、CVE-2013-0422（Javaの脆弱性）を悪用する攻撃コードが実行される仕組みとなっていました。 Javaの脆弱性を狙った攻撃は今後も継続することが予想されますので、特に必要のないユーザはアンインストールしておいた方が妥当かもしれません。 ちなみに、ダウンロードされる攻撃コードはmetasploitにより作成された可能性があります。 metasploit用に開発された攻撃コードの多くは研究し尽くされていますので、標的型攻撃で利用さ
CERT/CC Vulnerability Note VU#625617
Vulnerability Note VU#625617 Original Release Date: 2013-01-10 | Last Revised: 2013-06-12 Java 7 Update 10 and earlier versions of Java 7 contain a vulnerability that can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. The Oracle Java Runtime Environment (JRE) 1.7 allows users to run Java applications in a browser or as standalone programs. Oracle has mad
#4594319 - Pastie
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 // // CVE-2012-XXXX Java 0day // // reported here: http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html // // secret host / ip :
Blackhole v1.2.1
If you want to make enemies, try to change something. BlackHole 1.2.1: 1. Added Java Rhino exploit, working silently on all browsers and OS, this increased success rate. 2. Java SMB, Java Skyline, Java Trust removed for no need (Java Rhino covers the whole range of vulnerable jre from these exploits)
CVE-2011-3544 / ZDI-11-305 – Oracle Java Applet Rhino Script Engine Remote Code Execution
CVE-2011-3544 / ZDI-11-305 – Oracle Java Applet Rhino Script Engine Remote Code Execution by Michael 'mihi' Schierl, @mihi42 Summary This is a vulnerability in the Rhino Script Engine that can be used by a Java Applet to run arbitrary Java code outside of the sandbox. Since Rhino Scripts are basically strings of JavaScript, they are not controlled by the Java SecurityManager like origin of class f
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Research, News, and Perspectives
Endpoint Protection - Symantec Enterprise
Java Applet CVE-2012-5076 Analysis ≈ Packet Storm
CVE-2013-0422 学习 - ice - ITeye博客
Blogs | Trellix
Carberp Gang Evolution: CARO 2012 presentation
GitHub - jterrace/js.js: js.js: A JavaScript JavaScript interpreter
『Javaで作る超簡易x86エミュレータ』アップロード - マイペースなプログラミング日記
Blogs
Deconstructing the Black Hole Exploit Kit | Imperva
S21sec Security Blog: New ZeuS distribution campaign: ACH transaction canceled