Videre til indhold

Blog om Nørd og Fisk

Blog om Nørd og Fisk

Blog om Nørd og Fisk

Lumma stealer on my site ?

Just found a #lummastealer – downloader on my wordpress -but never used because my wordfence stopped it.
Running via a PowerShell script – where it download+run a file named 123.txt
As it’s still a live one : DO NOT run the code!!!
feel free to see the code : https://lnkd.in/dpHpZGKg

Related

Forfatter: Sune Andersen

The owner of the Site ;-) Vis alle indlæg fra Sune Andersen

Forfatter Sune AndersenUdgivet 12. juni 202512. juni 2025Kategorier Nørd / Hakkeri

Indlægsnavigation

Forrige Forrige indlæg: Build R00t for min DAP1610
Næste Næste indlæg: PMR radio-Analog vs. dPMR vs. DMR

Distrowatch

  • FlickOS 2.0
  • Shanios 2026.09.21
  • Essora 20260921
  • Kader⁴² 2026.09.20
  • MX Linux 25.3
  • Ubuntu completes migration to Rust-based Coreutils
  • New CoW filesystem for OpenBSD
  • GNOME 51 released
  • Over 100 Void packages need new maintainer
  • Debian updates Trixie install media

News: Demo Partys

  • Deadline 2026: Remote entries only for executable and wild / animation compos
  • Evoke 2026: Website is online
  • Impulse 2026: Invitation Demo Released
  • ROMA.EXE 2026: Party System open and Remote Entries now available!
  • ROMA.EXE 2026: MBR, AROTTENBIT and Gom Jabbar Live Acts announced!
  • Atari Last Party 2027
  • Inércia 2026
  • Dream210 2026
  • Demosplash 2026
  • Transmission64 2026

Exploit-DB

  • [remote] CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
  • [webapps] FreePBX 17.0.2 - Remote Code Execution (RCE)
  • [webapps] Metabase 0.61.0 - Authenticated Remote Code Execution
  • [webapps] Marimo 0.20.4 - RCE
  • [hardware] Fullhan FH8626V100 - Multiple Vulnerabilities

Security Week

  • Google Hit With $463 Million Fine for EU Location Data Rule Breach
  • Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer
  • CISO Conversations: Noopur Davis – The Accidental Global CISO at Comcast
  • Dragos Completes NetRise and runZero Acquisitions Following Accenture Deal
  • RatHat Android Trojan Uses AI for Automation
Blog om Nørd og Fisk Drevet af WordPress