Entrée Pandipedia
LAUNDRY BEAR’s Zimbra chain, from phish to exfil
01
LAUNDRY BEAR’s Zimbra chain, from phish to exfil
02
LAUNDRY BEAR’s Zimbra chain, from phish to exfil
The initial payload was hidden in an SVG onload field, wrapped in Base64 and XOR layers, and relied on repeated @import directives plus 12 asynchronous stages to reach its logic[3].
03
LAUNDRY BEAR’s Zimbra chain, from phish to exfil
04
LAUNDRY BEAR’s Zimbra chain, from phish to exfil
05
LAUNDRY BEAR’s Zimbra chain, from phish to exfil
CISA says Ulej sent stolen data to Flowerbed infrastructure over DNS and HTTPS, with DNS payloads Base32-encoded, split into short labels, and triggered by image requests. Defenders should patch to ZCS 10.1.13 or 10.0.18, avoid Classic webmail until patched, watch for suspicious domains and random subdomains, review localStorage for zd_comp_YYYY-MM-DD, and revoke all Application Passcodes and 2FA scratch keys if compromise is found[10][11][12][13][14][15][16][17][18].
Désolé, Pandi n'a pas trouvé de réponse.
Examinons les alternatives :
- Modifier la requête.
- Démarrer une nouvelle conversation.
- Supprimer des sources (si elles ont été ajoutées manuellement).
Continuer l’exploration
Explorer des sujets liés
How does two-factor authentication reduce phishing success rates?GeoServer CVE-2024-36401 response: what the attack chain teaches defendersClassify Identity and Cloud Intrusion PatternsWhy do deepfake videos bypass traditional fact-checking methods?Block email takeovers with one quick switchHow do browser extension scams hijack personal data?What is 'store-now, decrypt-later' and who is at risk?. Clarify the tactic of harvesting encrypted data today for future quantum decryption. Identify sectors most exposed.Are your passwords future-proof?