Major Incidents or Breaches

  • Dutch authorities dismantled a botnet comprising approximately 17 million infected devices, including computers, tablets, smartphones, and IoT devices, which had been used to conduct malicious attacks [1].
  • Attackers are actively exploiting a vulnerability in the WP Maps Pro plugin for WordPress, enabling unauthenticated creation of rogue administrator accounts on affected websites [2].

Newly Discovered Vulnerabilities

  • A security flaw in the WP Maps Pro WordPress plugin allows attackers to create administrator accounts without authentication, which is currently being exploited in the wild [2].

Notable Threat Actor Activity

  • Threat actors are using an unidentified remote access trojan (RAT) to deploy NetSupport RAT, indicating active campaigns leveraging multi-stage malware delivery [6].

Trends, Tools, or Tactics of Interest

  • YARA-X version 1.17.0 has been released, featuring five performance improvements and one bugfix, enhancing malware detection capabilities [7].

Sources#

  1. Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices - thehackernews.com
  2. WP Maps Pro bug exploited to create admin accounts on WordPress sites - bleepingcomputer.com
  3. Unidentified RAT pushes NetSupport RAT, (Mon, Jun 1st) - isc.sans.edu
  4. YARA-X 1.17.0 Release, (Sun, May 31st) - isc.sans.edu