command and control news
3 stories
Critical Flaw in NASA/JPL Open-Source Spacecraft Command Software Allowed Unauthenticated Command Execution
A critical vulnerability has been identified in AIT-GUI, the browser-based operator console for NASA/JPL's open-source AMMOS Instrument Toolkit. The flaw, rated with a CVSS score of 9.4 and tracked as GHSA-p9r8-2q67-fp86, allowed unauthenticated execution of commands on spacecraft instruments. The issue has been addressed in AIT-GUI version 2.5.2.
Cavern C2 Framework Evolves With DNS and Google Apps Script
New analysis indicates that the Cavern command-and-control (C2) framework, attributed to Iranian nation-state actors, has undergone significant evolution. Researchers have observed the integration of DNS and Google Apps Script into the framework's operational mechanisms. This development suggests an effort to improve the stealth and resilience of the C2 infrastructure, particularly in…
Analysis of Ongoing Ousaban Attacks Targeting the Iberian Peninsula
Researchers have observed a new campaign by the banking Trojan Ousaban, which is actively targeting users in Spain and Portugal. This malware, previously known for its activity in Brazil, is being distributed via a sophisticated phishing scheme that employs geofencing and environmental checks to limit its reach.