Search
Keyword: unauthorized file encryption
attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka "File Converter Buffer Overflow Vulnerability." microsoft office 2000,microsoft office 2003,microsoft
webadmn.nsf file disclosure
as demonstrated using the mosConfig_absolute_path parameter to content.html.php for remote PHP file inclusion. Mambo Mambo Site Server 4.0,Mambo Mambo Site Server 4.0.10,Mambo Mambo Site Server
Firefox Arbitrary File Disclosure
This worm arrives via removable drives. It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It drops an AUTORUN.INF
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes itself after execution. It encrypts files
displays images of ransom note with victim ID after its encryption routine: The ransom note text file contains the following: Spammed via email, Downloaded from the Internet Connects to URLs/IPs, Displays
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It does not have any propagation routine. It does not
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It deletes files in certain folders, disabling
related to online banking by monitoring browser activity. This spyware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
detection and cleanup difficult. 3. The SIM card vulnerability . The source of this bug is the old encryption system used in most SIM cards. It allows attackers to generate a device error that reveals the
steal sensitive online banking information, such as user names and passwords. This routine risks the exposure of the user's account information, which may then lead to the unauthorized use of the stolen
unauthorized use of the stolen data. Once users access any of the monitored sites, it starts logging keystrokes. It attempts to steal information, such as user names and passwords, used when logging into certain
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It encrypts files found in specific folders. It
vssadmin.exe It locks the screen after file encryption routine It avoids to encrypt the following files/folders: \WINNT \RECYCLER\ \SYSTEM~1\ \BOOT\ \RECOVERY\ \$RECYCLE.BIN\ \PERFLOGS\ \EFI\ \CONFIG.MSI
This Ransomware arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It steals certain information from the system and/or
elf lgf lgp log st pff mft efd md xsn It renames encrypted files using the following names: "{Encrypted String}.xtbl" "{Original File Name}.ytbl" - if file name encryption fails Troj/Ransom-AWQ (Sophos
do SpyEye malware steal information? SpyEye downloads a configuration file on the infected systems. This configuration file contains the list of monitored websites. When users accessed any of the
Variants also perform web injection—inserting additional HTML forms—to get additional information. Stolen login credentials are used to initiate unauthorized transactions like online fund transfers. The
arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. Arrival Details This Trojan arrives on a system as a file dropped by other