Hackers are delivering LegionLoader through an executable inflated to 882,716,672 bytes, roughly 842 MiB, to challenge security scanning limits. Researchers investigating an incident uncovered the delivery chain while examining ROMULUS, a shared ClickFix platform supporting multiple malware payloads. The investigation identified six IP addresses... Weiterlesen: Hackers Hide LegionLoader Malware in Massive Executable Files to Evad…
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Hide LegionLoader Malware in Massive Executable Files to Evade Security Scanners
Hackers are delivering LegionLoader through an executable inflated to 882,716,672 bytes, roughly 842 MiB, to challenge security scanning limits. Researchers…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
9 Quellen
CVE-2026-98447 | Linux Kernel up to 6.18.54/7.2.8/7.3-rc4 XFS Inode Btree Root Formatting memory corruption (Nessus ID 367297)
8 weitere Quellen
Ttsecurity.de6 min. geledenCVE-2026-98445 | Linux Kernel up to 6.12.112/6.18.55/7.2.8/7.3-rc4 xfs xrep_newbt_add_blocks allocation of resources (Nessus ID 367296) Ttsecurity.de6 min. geledenCVE-2024-26738 | Linux Kernel up to 6.6.18/6.7.6 iommu_device_register null pointer dereference (b8315b2e25b4/46e36ebd5e00/a5c57fd2e9bd / WID-SEC-2024-0773) Ttsecurity.de6 min. geledenCVE-2024-26742 | Linux Kernel up to 6.1.79/6.6.18/6.7.6 block/blk-mq-pci.c blk_mq_map_queues stack-based overflow (WID-SEC-2024-0773) Ttsecurity.de6 min. geledenCVE-2024-26741 | Linux Kernel up to 6.1.79/6.6.18/6.7.6 dccp lib/dump_stack.c check_estalblished allocation of resources (Nessus ID 213018 / WID-SEC-2024-0773) Ttsecurity.de6 min. geledenCVE-2024-26744 | Linux Kernel up to 6.7.6 RDMA srpt_service_guid null pointer dereference (Nessus ID 210815 / WID-SEC-2024-0773) Ttsecurity.de6 min. geledenCVE-2024-26743 | Linux Kernel up to 6.7.6 on RIP RDMA qedr_init_user_queue allocation of resources (Nessus ID 210815 / WID-SEC-2024-0773)
+2
2 Quellen
CVE-2026-76879 | Wireshark up to 4.4.17/4.6.7 Dissector input validation (Nessus ID 367289)
2 Quellen
CVE-2026-82397 | tornadoweb Tornado up to 6.5.7 Request Body Parsing tornado/web.py RequestHandler._execute infinite loop (Nessus ID 367287)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/nl/4275859/malware-trojaner-viren/hackers-hide-legionloader-malware-in-massive-executable-files-to-evade-security-scanners/