Tag: Golang Trojan

Botnets Continue Exploiting CVE-2023-1389 for Wide-Scale Spread

Posted on

Last year, a command injection vulnerability, CVE-2023-1389, was disclosed and a fix developed for the web management interface of the TP-Link Archer AX21 (AX1800). FortiGuard Labs has developed an IPS signature to tackle this issue. Recently, their researchers observed multiple Read More …

New Golang Trojan Installs Certificate for Comms Evasion

Posted on

This week, the Sonicwall Capture Labs threat research team analyzed a new Golang malware sample. It uses multiple geographic checks and publicly available packages to screenshot the system before installing a root certificate to the Windows registry for HTTPS communications Read More …