vulnerabilities Archives

Threat Intelligence

JS Sniffer: E-commerce Data Theft Made Easy

July 19, 2018

Volexity Threat Research

In late 2017, Volexity began tracking a new e-commerce financial data theft framework named JS Sniffer. The framework gives attackers a quick and efficient way to steal data from compromised […]

Threat Intelligence

APT Group Wekby Leveraging Adobe Flash Exploit (CVE-2015-5119)

July 8, 2015

Volexity

As if the recent breach and subsequent public data dump involving the Italian company Hacking Team wasn’t bad enough, it all gets just a little bit worse. Emerging from the […]

Threat Intelligence

Afghan Government Compromise: Browser Beware

June 12, 2015

Volexity

Visiting a wide-ranging number of websites associated with the Government of Afghanistan may yield visitors an unwanted surprise. For the second time this year, malicious code has surfaced on, cdn.afghanistan.af, […]

Threat Intelligence

CVE-2014-6271 – Remotely Exploitable Vulnerability in Bash

September 24, 2014

Volexity

With the excitement of public details of a remotely exploitable vulnerability in bash (CVE-2014-6271) coming to light today, we decided it was as good of time as any to finally […]