So now about vulnerability attacks. I
will give examples of vulnerabilities in different areas of life to have an understanding of what the perpetrators use.
Let's go over the software and our first "martyr" windows .....Generally speaking, in the Venda itself the cybercriminals often hijack the rdp session. For remote access, here is an article about rdp vulnerabilities.
Yes, there are vulnerabilities not only there , for example some nuclear vulnerabilities and many others .
But here is a post to give you an overview.
What about
linux? On linux mostly use kernel vulnerabilities for different versions of their vulnerabilities, in particular vulnerabilities in the file system. Generally, here is the link with the new Linux cve linux walk you smart users and want to protect yourself.
By the way, there is a cool site with a database of 0 day linux and windows
Sometimes hackers can hack into the router via its vulnerabilities, here is an article about critical vulnerabilities of Cisco Small Business or we can remind about our poor old MikroTik , here is a collection of such vulnerabilities.
If we are talking about network, the hackers often use vulnerabilities of some vpn environments in companies.
There are also different server vulnerabilities for downloading malicious php files , it is not quite the same, but from the same type of vulnerabilities.
There are also vulnerabilities in different vm systems e.g. our favorite vmware which has many vulnerabilities and I have already had a post about it. 🧩
I want to touch on funny application vulnerabilities like that rce WhatsAp that with gif , I remember
CVE-2021-24043 :
WhatsApp could allow reading outside the heap if the user sent a garbled RTCP packet during an established call.
Well and CVE-2021-24042 : Call Logic for WhatsApp for Android , WhatsApp could allow writing outside the bounds if the user called an intruder .
Also exploit various browser vulnerabilities like these chrome and youk . Or mobile device vulnerabilities like CVE-2022-22587 in iso or android vulnerabilities .
Hacks of this kind do not use a single vulnerability. There can be many ways to deliver a virus. For this reason, I think it is worth talking about the combination of social engineering with the technical part.Here is a practical example of a very common situation:
An intruder Sasha decides to hack company A in this company use a vpn fortinet client. Using social engineering he accesses the vpn and enters the network of the company, there he breaks the linux or windows server of the company through some vulnerabilities and downloads the virus.
So how to protect yourself from such sashes (oh pardon me all sashes)?
What I can say -
keep an eye on new vulnerabilities and if possible remove them from your devices, update your anti-virus, be careful with people or mail.
As a result, we lead the work of an attacker not only in writing the virus but also in delivering it. From this article we can conclude that we should be more enthusiastic about everything and less relaxed .And that's it, thanks for reading it dear Cheshire cats🐱❤️ .
And think about whether you are following Wonderland or Wonderland is following you🔮
#cve #virus
