Hacking

Hacking HOME Reconnaissance(10) Resource Development(8) Initial Access(10) Execution(14) Persistence(20) Privilege Escalation(14) Defense Evasion(43) Credential Access(17) Discovery(32) Lateral Movement(9) Collection(17) Command and Control(17) Exfiltration(9) Impact(14)

DATE	NAME	CATEGORY	SUBCATE	INFO
9.7.24	Jenkins Script Console	HACKING	CRYPTOCURRENCY	Turning Jenkins Into a Cryptomining Machine From an Attacker's Perspective
14.6.24	Sleepy Pickle Part 2	HACKING	ML	Exploiting ML models with pickle file attacks: Part 2
14.6.24	Sleepy Pickle Part 1	HACKING	ML	Exploiting ML models with pickle file attacks: Part 1
5.6.24	Excel File Deploys	HACKING	HACKING	FortiGuard Labs has recently identified a sophisticated cyberattack involving an Excel file embedded with a VBA macro designed to deploy a DLL file.
3.6.24	Cox modems hack	HACKING	Hardware	Hacking Millions of Modems (and Investigating Who Hacked My Modem)
1.6.24	Pumpkin Eclipse	HACKING	Hardware	Lumen Technologies’ Black Lotus Labs identified a destructive event, as over 600,000 small office/home office (SOHO) routers were taken offline belonging to a single internet service provider (ISP).
28.5.24	DNSBomb	Hacking	DNS	DNSBomb is a new practical and powerful pulsing DoS attack exploiting DNS queries and responses.
28.5.24	Server Side Credit Card Skimmer Lodged in Obscure Plugin	Hacking	Hacking	Attackers are always finding new ways to inject malware into websites and new ways to obscure it to avoid detection, but they’re always up to their same old tricks. In this post, we’ll explore how attackers are using a very obscure PHP snippet WordPress plugin to install server-side malware to harvest credit card details from a WooCommerce online store.
27.5.24	HTML Smuggling	Hacking	HTML	HTML smuggling is an innovative attack technique, which abuses HTML5 and JavaScript features to inject or extract data across network boundaries.
27.5.24	Transparent Phishing and HTML Smuggling	Hacking	Phishing	Phishing with Cloudflare Workers: Transparent Phishing and HTML Smuggling
10.5.24	Tunnelcrack	Hacking	VPN	TunnelCrack is a combination of two widespread security vulnerabilities in VPNs. An adversary can abuse these vulnerabilities to leak traffic outside the VPN tunnel.
10.5.24	TunnelVision	Hacking	VPN	A local network VPN leaking technique that affects all routing-based VPNs
11.4.24	Trick Developers Detected in an Open Source Supply Chain Attack	Hacking	Hacking	In a recent attack campaign, cybercriminals were discovered cleverly manipulating GitHub's search functionality, and using meticulously crafted repositories to distribute malware.
22.3.24	z0Miner	Hacking	Exploit	z0Miner Exploits Korean Web Servers to Attack WebLogic Server
7.3.24	Quishing	Hacking	Mobil	QR codes have had a great run in the past few years, diffusing into almost every aspect of our lives, from looking at restaurant menus and paying for products or services online and offline to accessing websites with greater ease. While the positives of QR codes are clearly visible, both from a business and user perspective, their usage has some pitfalls.
18.1.24	iShutdown	Hacking	iOS	A lightweight method to detect potential iOS malware
3.1.24	SMTP Smuggling	Hacking	SPAM	In the course of a research project in collaboration with the SEC Consult Vulnerability Lab, Timo Longin (@timolongin) - known for his DNS protocol attacks
1.1.24	Hijack Execution Flow: DLL Search Order Hijacking	Hacking	DLL	Adversaries may execute their own malicious payloads by hijacking the search order used to load DLLs. Windows systems use a common method to look for required DLLs to load into a program.Hijacking DLL loads may be for the purpose of establishing persistence as well as elevating privileges and/or evading restrictions on file execution.
26.12.23	RTF template injection	Hacking	Phishing	Injection is the New Black: Novel RTF Template Inject Technique Poised for Widespread Adoption Beyond APT Actors
24.12.23	Insta-Phish-A-Gram	Hacking	Phishing	Following Trustwave SpiderLabs’ blog on social media-themed phishing on Facebook, comes another flavor of ‘infringement’ phishing. In this case, the targets, still under the umbrella of Meta, are Instagram users
9.12.23	5GHOUL	Hacking	5G	5Ghoul : Unleashing Chaos on 5G Edge Devices
8.12.23	Ongoing attacks	Hacking	Phishing	Star Blizzard increases sophistication and evasion in ongoing attacks
6.12.23	Fake Lockdown Mode	Hacking	Apple	Fake Lockdown Mode: A post-exploitation tampering technique
28.11.23	PERFORM NTLM FORCED AUTHENTICATION ATTACKS	Hacking	Hacking	ABUSING MICROSOFT ACCESS “LINKED TABLE” FEATURE TO PERFORM NTLM FORCED AUTHENTICATION ATTACKS
6.11.23	Agonizing Serpens	Hacking	Hacking	The attacks are characterized by attempts to steal sensitive data, such as personally identifiable information (PII) and intellectual property.
2.11.23	Kopeechka	Hacking	Tool	How Kopeechka, an Automated Social Media Accounts Creation Service, Can Facilitate Cybercrime
3.10.23	Authenticated Origin Pulls (mTLS)	Hacking	Hacking	When visitors request content from your domain, Cloudflare first attempts to serve content from the cache. If this attempt fails, Cloudflare sends a request — or an origin pull — back to your origin web server to get the content.
3.10.23	Silent Skimmer	Hacking	Hacking	Silent Skimmer: Online Payment Scraping Campaign Shifts Targets From APAC to NALA
1.10.23	ZeroFont phishing technique	Hacking	Phishing	ZeroFont phishing technique
14.9.23	Repo Jacking	Hacking	Hacking	Repo Jacking: Exploiting the Dependency Supply Chain
24.7.23	drIBAN	Hacking	Hacking	Uncovering drIBAN fraud operations. Chapter 3: Exploring the drIBAN web inject kit
4.7.23	HTML Smuggling	Hacking	Hacking	HTML Smuggling: The Hidden Threat in Your Inbox
1.7.23	Proxyjacking	Hacking	Hacking	Proxyjacking: The Latest Cybercriminal Side Hustle
28.6.23	Process Mockingjay	Hacking	Hacking	Process Mockingjay: Echoing RWX In Userland To Achieve Code Execution