article thumbnail

A 15-Year-Old Unpatched Python bug potentially impacts over 350,000 projects

Security Affairs

More than 350,000 open source projects can be potentially affected by an unpatched Python vulnerability, tracked as CVE-2007-4559 (CVSS score: 6.8), that was discovered 15 years ago. dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267. As we dug into the issue, we realized this was in fact CVE-2007-4559.”

Archiving 265
article thumbnail

Long-existing Bandook RAT targets Windows machines

Security Affairs

Bandook has been active since 2007, it has been continuously developed since then and was employed in several campaigns by different threat actors. Upon extracting the malware from the archive, the malicious code injects its payload into msinfo32.exe. The new variant observed in October spreads via phishing messages using a PDF file.

Phishing 334
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Russia-Linked Turla APT uses new malware in watering hole attacks

Security Affairs

The Turla APT group (aka Snake , Uroburos , Waterbug , Venomous Bear and KRYPTON ) has been active since at least 2007 targeting diplomatic and government organizations and private businesses in the Middle East, Asia, Europe, North and South America, and former Soviet bloc nations.

Archiving 363
article thumbnail

Archives Month: Web Archive (WARC) File Format

The Texas Record

It’s October, which means that it is once again time to celebrate American Archives Month ! First on the docket: web archiving. Web archiving requires the use of a preservation format that maintains all hyperlinked content and metadata in its original context. Store the harvested data in a web archive format, like WARC.

article thumbnail

Who’s Behind the ‘Web Listings’ Mail Scam?

Krebs on Security

Since at least 2007, Web Listings Inc. The mailer references the domain name web-listings.net , one of several similarly-named domains registered sometime in 2007 or later to a “ James Madison ,” who lists his address variously as a university in New Britain, Connecticut or a UPS Store mailbox in Niagara Falls, New York.

Marketing 296
article thumbnail

Financially motivated Earth Lusca threat actors targets organizations worldwide

Security Affairs

The Winnti group was first spotted by Kaspersky in 2013, but according to the researchers the gang has been active since 2007. “The user eventually downloads an archive file containing either a malicious LNK file or an executable — eventually leading to a Cobalt Strike loader.”

article thumbnail

Russia-linked APT Turla used a new malware toolset named Crutch

Security Affairs

The Turla APT group (aka Snake , Uroburos , Waterbug , Venomous Bear and KRYPTON ) has been active since at least 2007 targeting diplomatic and government organizations and private businesses in the Middle East, Asia, Europe, North and South America, and former Soviet bloc nations.

Archiving 363