01/09

Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps

https://www.bleepingcomputer.com/news/security/dev-corrupts-npm-libs-colors-and-faker-breaking-thousands-of-apps/
Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps

Unpacking CVE-2021-40444: A Deep Technical Analysis of an Office RCE Exploit

https://billdemirkapi.me/unpacking-cve-2021-40444-microsoft-office-rce
Unpacking CVE-2021-40444: A Deep Technical Analysis of an Office RCE Exploit

Shlyuz Implant Framework: Part 1 - Influences | Und3rf10w

https://und3rf10w.github.io/posts/2022/01/08/shlyuz-1-influences.html
Shlyuz Implant Framework: Part 1 - Influences | Und3rf10w

Release v0.8 - Warfare Tactics | Brute Ratel C4

https://bruteratel.com/release/2022/01/08/Release-Warfare-Tactics/
Release v0.8 - Warfare Tactics | Brute Ratel C4

Trojanized dnSpy app drops malware cocktail on researchers, devs

https://www.bleepingcomputer.com/news/security/trojanized-dnspy-app-drops-malware-cocktail-on-researchers-devs/
Trojanized dnSpy app drops malware cocktail on researchers, devs

500M Avira Antivirus Users Introduced to Cryptomining – Krebs on Security

https://krebsonsecurity.com/2022/01/500m-avira-antivirus-users-introduced-to-cryptomining/
500M Avira Antivirus Users Introduced to Cryptomining – Krebs on Security