PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

StormBamboo Compromises ISP to Abuse Insecure Software Update Mechanisms

volexity.com | research | #vulnerability-research | #threat-intelligence | #malware | #apt | #china | #isp | #dns-poisoning | #gimmick | #macma | #reloadext | #stormbamboo | #volexity | #update-poisoning
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

# StormBamboo Compromises ISP to Abuse Insecure Software Update Mechanisms August 2, 2024 Ankur Saini, Paul Rascagneres, Steven Adair, and Tom Lancaster In mid-2023, Volexity detected and...
Published
Collected

Related coverage

vulnerability · volexity.com
DriftingCloud: Zero-Day Sophos Firewall Exploitation and an Insidious Breach
Volexity frequently works with individuals and organizations heavily targeted by sophisticated, motivated, and well-equipped threat actors from around the world. Some of these individuals or organizations are attacked infrequently or […]
vulnerability · volexity.com
Virtual Private Keylogging: Cisco Web VPNs Leveraged for Access and Persistence
In the world of information security, there is never a dull moment. Part of the fun of working in this space is that you always get to see attackers do […]
vulnerability · volexity.com
APT Group Wekby Leveraging Adobe Flash Exploit (CVE-2015-5119)
As if the recent breach and subsequent public data dump involving the Italian company Hacking Team wasn’t bad enough, it all gets just a little bit worse. Emerging from the […]
research · volexity.com
BrazenBamboo Weaponizes FortiClient Vulnerability to Steal VPN Credentials via DEEPDATA
# BrazenBamboo Weaponizes FortiClient Vulnerability to Steal VPN Credentials via DEEPDATA November 15, 2024 Callum Roxan, Charlie Gardner, and Paul Rascagneres _Update: At the time of publication,...
research · volexity.com
EvilBamboo Targets Mobile Devices in Multi-year Campaign
# EvilBamboo Targets Mobile Devices in Multi-year Campaign September 22, 2023 Callum Roxan, Paul Rascagneres, and Tom Lancaster Volexity has identified several long-running and currently active...
research · volexity.com
Storm Cloud on the Horizon: GIMMICK Malware Strikes at macOS
In late 2021, Volexity discovered an intrusion in an environment monitored as part of its Network Security Monitoring service. Volexity detected a system running frp, otherwise known as fast reverse […]
Back