Bleeping Computer

New GZipDe Malware Drops Metasploit Backdoor

Security researchers from AlienVault have discovered a new malware strain named GZipDe that appears to be part of a targeted attack —most likely a cyber-espionage campaign. Researchers discovered this ...
ZDNet

Cobalt Strike and Metasploit accounted for a quarter of all malware C&C servers in 2020

I wore the world's first HDR10 smart glasses TCL's new E Ink tablet beats the Remarkable and Kindle Anker's new charger is one of the most unique I've ever seen Best laptop cooling pads Best flip ...
Dark Reading

Expired Redis Service Abused to Use Metasploit Meterpreter Maliciously

Attackers are using an 8-year-old version of the Redis open-source database server to maliciously use Metasploit's Meterpreter module to expose exploits within a system, potentially allowing for ...
eWeek

Metasploit Creator Releases Malware Search Engine

AI success depends on whether enterprise data is ready, reachable, and close enough to the workloads that need it. In this eSpeaks episode, Dell Technologies’ Vrashank Jain explains why fragmented ...
Threat Post

15 Years Later, Metasploit Still Manages to be a Menace

A fresh look at the penetration testing tool Metasploit reveals the 15-year old hacking tool still has some tricks up its sleeves, even against modern defenses. The popular penetration testing and ...
Threat Post

SMB2 Exploit Fitted into Metasploit; Attacks Likely

Fully functional exploit code for the (still unpatched) Windows SMB v2 vulnerability has been released to the public domain via the freely available Metasploit point-and-click attack tool, raising the ...
Bleeping Computer

EternalBlue NSA Exploit Becomes Commodity Hacking Tool, Spreads to Other Malware

ETERNALBLUE, an alleged NSA exploit targeting the SMBv1 protocol leaked by the Shadow Brokers in mid-April, has become a commodity hacking tool among malware developers. The tool's notoriety comes ...
CSOonline

Rapid7 launches Metasploit Express

Rapid7's integration of Metasploit takes a new turn this week, with the SOURCE Boston unveiling of a new pen-testing tool. When Rapid7 announced it was acquiring HD Moore’s hugely popular Metasploit ...
AppleInsider

Microsoft Word macro malware automatically adapts attack techniques for macOS, Windows

A form of Word macro-based malware has been uncovered that can affect both macOS and Windows users when executed, with the malicious file modifying its attack method depending on which operating ...