sno bunny

Wed May 13 15:47:10 2020 <8f79fcda> <@U4FQ46RGU> interesting to note that there was an uptick in BTC price the April 28th/29th which correlates with when these attacks began. <https://www.wordfence.com/blog/2020/05/one-attacker-rules-them-all/> — One Attacker Outpaces All Others — Starting April 28th, we saw a 30 times increase in cross site scripting attack volume, originating from a single […]

Wed May 13 14:19:06 2020
<773ab1f1> oh snap clever
<773ab1f1> nice way to weaponize a payload fire and forget style

Wed May 13 13:46:13 2020
<773ab1f1> Do you know how the XSS payload was delivered to the admin?
<8f79fcda> Through a wp_post table

Wed May 13 13:20:57 2020 <8f79fcda> <@U4FQ46RGU> <https://www.wordfence.com/blog/2020/05/nearly-a-million-wp-sites-targeted-in-large-scale-attacks/|https://www.wordfence.com/blog/2020/05/nearly-a-million-wp-sites-targeted-in-large-scale-attacks/> — Nearly a Million WP Sites Targeted in Large-Scale Attacks — Our Threat Intelligence Team has been tracking a sudden uptick in attacks targeting Cross-Site Scripting(XSS) vulnerabilities that began on April 28, 2020 and increased over the next few days to approximately 30 times the normal volume […]

Wed May 13 02:39:32 2020
<8f79fcda> one looks like an azure vuln

Wed May 13 02:28:19 2020
<8f79fcda> i don’t know enough details to speak competently on the details. The fact that 2 happened in a day is of note. totally different systems/vendors

Wed May 13 02:06:47 2020
<773ab1f1> Fancy, kno how yet?

Wed May 13 01:40:41 2020
<8f79fcda> Cyberattacks are up today
<8f79fcda> our phone service at work disabled outgoing calls
<8f79fcda> and we had a JS injection attack on one of our production servers that negotiated it’s way to …