Beginning of August, I wrote a story about the Olympic games where I talked about and exposed some of the security risks of the Olympic games.
The post TeamUSA.org was hacked yesterday appeared first on Avira Blog.
Monthly Archives: September 2016
Zepto ransomware now introduces new features to better encrypt your files
Zepto ransomware is a relatively new player in the ransomware scene, and it’s closely related to the infamous Locky ransomware. Taking a closer look at Zepto’s code, we found that the code is pretty much the same as Locky’s code, but it has been slightly modified. The malware authors behind Zepto use the same methods used to spread Locky, and even the infection vector and the TOR payment page are the same, which makes us think that the people behind Locky are now spreading Zepto. The only difference between Locky and Zepto is the ransom demand. Zepto’s demand is much higher than Locky’s, 3 Bicoins (approximately $1,850).
Windows x86 TCP Bind Shell Shellcode
Microsoft Windows x86 TCP bind shell shellcode.
Dashlane doOnboardingSiteStep API Cross Site Scripting
Dashlane suffers from a cross site scripting vulnerability in the doOnboardingSiteStep API.
Android debuggerd Mitigation Bypass / Information Leak
Android debuggerd was recently changed to drop privileges between attaching to a crashed process and dumping it to reduce its attack surface. The following issue allows that mitigation to be bypassed and also allows a privileged attacker (logcat access) to bypass userland ASLR.
Adobe Flash Method Calls Use-After-Free
If a method is called on a MovieClip in Adobe Flash, and a getter is set with the name of the method, the getter will get executed during the call, and can free the MovieClip, leading to a user-after-free.
Adobe Flash Transform.colorTranform Getter Information Leak
There is an information leak in Adobe Flash in the Transform.colorTranform getter. If the constructor for ColorTransform is overwritten with a getter using addProperty, this getter will execute when fetching the constructor, which can then free the MovieClip containing the Tranform.
Android libutils Heap Buffer Overflow
Android suffers from an inconsistency between the way that the two functions in libutils/Unicode.cpp handle invalid surrogate pairs in UTF16, resulting in a mismatch between the size calculated by utf16_to_utf8_length and the number of bytes written by utf16_to_utf8. This results in a heap buffer overflow.
Wireshark Analyzer 2.2.0
Wireshark is a GTK+-based network protocol analyzer that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and Win32 and to give Wireshark features that are missing from closed-source sniffers.