Posted by malvuln on Mar 24

Discovery / credits: Malvuln – malvuln.com (c) 2021
Original source:
https://malvuln.com/advisory/ed1e47f62fa93f2fd2f4fbcfdd0f1c10.txt
Contact: malvuln13 () gmail com
Media: twitter.com/malvuln

Threat: Worm.Win32.Ngrbot.abpr
Vulnerability: Insecure Permissions
Description: Ngrbot.abpr creates a dir named “Win.Msi” under c: drive and
grants change (C) permissions to the authenticated user group. Standard
users can rename several of the…
Read More – Full Disclosure


By |2021-03-25T07:19:16-04:00March 25th, 2021|