UNC5221: Unreported and Undetected WIREFIRE Web Shell Variant
Our investigation uncovers a previously unreported and undetected variant of the WIREFIRE web shell, a Python-based implant found in Ivanti
QuoINT
January 22, 2024
Explore our comprehensive archive organized by taxonomy. Discover a wealth of information categorized by subject, theme, or type to enhance your research and understanding.
Our investigation uncovers a previously unreported and undetected variant of the WIREFIRE web shell, a Python-based implant found in Ivanti
Insights from Microsoft’s Patch Tuesday show critical vulnerabilities don’t require authentication | Decoding the Cyber Insurance Maze
Insights from Microsoft’s Patch Tuesday show critical vulnerabilities don’t require authentication | Decoding the Cyber Insurance Maze
A critical vulnerability in Google’s authentication process allows cybercriminal to regenerate and reuse stolen cookies indefinitely.
Final Weekly Intelligence Bulletin of 2023 | Kaspersky reveals more about Operation Triangulation, the highly advanced spyware.
In this Week’s Intelligence Update: Newly Discovered SMTP Smuggling Attack | Geopolitical Implications of Iranian Petrol Station Cyberattack
Microsoft released Patch Tuesday security update with fixes for 34 vulnerabilities (4 critical, one Zero-Day.
Forescout Vedere Labs uncovers 21 Vulnerabilities in Sierra Wireless AirLink cellular routers — a popular OT/IoT Router.
Okta Breach Update: All Customer Support System Users Affected | EU Green Measures – How Will They Affect Your Business?
AI Regulation — Where Do Germany, Italy, and France Stand? | North Korea Targets IT Job Seekers |
Try searching our blog
Russian-Speaking eCrime Threat Actor Leverages Commercial AI Services to Compromise Over 600 FortiGate Devices | US Supreme Court Strikes Down Trump’s Global Tariffs
UNC6201 Exploiting Zero-day in Dell RecoverPoint to Achieve Persistent Access | Wave of Sabotage Acts Target Italian Railway Network Amid Winter Olympics
Exchange URL Rule Failure Sparks Mass Email Quarantine, ZeroDayRAT Spyware, SSH Botnets and DPRK LinkedIn Fraud Expand Global Threat Landscape | EU Launches 20th Russia Sanctions Package
APT28 Targeting Central and Eastern Europe through CVE‑2026‑21509 Exploitation | UK Opens First Investigations Over Breach Of Cyber Sanctions