Red Hot Cyber
Cybersecurity is about sharing.
Recognize the risk, combat it, share your experiences,
and encourage others to do better than you.
RHC Dark Lab : 25 June 2024 20:48
Recently, a security alert shaked the infosec environment: A malicious actor has announced the sale of Use After Free (UAF) 0-day vulnerability affecting the Linux Kernel on the well-known darknet forum BreachForum. The vulnerabilit permits high privileges code execution to low priviliged users, posing a serious threat to affected systems.
The vulnerability author specifies that the vulnerability affects the 6.6.15-amd64 version of the Linux Kernel. UAF occurs when the memory freed previously could be subsequently re-used allowing attackers to execute arbitrary code with High Privileges (Local Privilege Escalation), bypassing OS’s standard secuirty measures
In the post the exploit author state “selling 0day Use-after free in the Linux Kernel, you can use it to do a Privileged Code Execution ( LPE (Local Privilege Escalation), or execute code with root privileges ), ( Data Leakage )..etc”. The sell price of the vulnerability is fixed to 150.000 USD. The only payment method allowed is exclusively through Monero (XMR) or Bitcoin (BTC) cryptocurrency. The use of cryptocurrency is chosen to ensure transaction’s anonymity.
Vuoi diventare un esperto del Dark Web e della Cyber Threat Intelligence (CTI)?
Stiamo per avviare il corso intermedio in modalità "Live Class", previsto per febbraio.
A differenza dei corsi in e-learning, disponibili online sulla nostra piattaforma con lezioni pre-registrate, i corsi in Live Class offrono un’esperienza formativa interattiva e coinvolgente.
Condotti dal professor Pietro Melillo, le lezioni si svolgono online in tempo reale, permettendo ai partecipanti di interagire direttamente con il docente e approfondire i contenuti in modo personalizzato.
Questi corsi, ideali per aziende, consentono di sviluppare competenze mirate, affrontare casi pratici e personalizzare il percorso formativo in base alle esigenze specifiche del team, garantendo un apprendimento efficace e immediatamente applicabile.
Per ulteriori informazioni, scrivici ad [email protected] oppure scrivici su Whatsapp al 379 163 8765
Supporta RHC attraverso:
Ti piacciono gli articoli di Red Hot Cyber? Non aspettare oltre, iscriviti alla newsletter settimanale per non perdere nessun articolo.
The middle-man for the transaction is IntelBroker, a well known malicious actor, making payment easier for a potential buyer. Moreover the use of a trusted middle-man ensure trust and transparency for the involved parties although they still operate anonymously.
0-day marketplaces poses an important threat to cybersecurity on a global scale. System administrators and infosec professionals needs to be constantly aware and ready to apply security patch as soon as they become accessible to threat actors. The security community must collaborate to identify and mitigate such threats as quickly as possibile.
The uncover of this 0-day Linux Kernel vulnerability highlights once again the importance of computer security and the necessity to be aware from emerging dangers. The technology community must continue to invest in responsive security measures in order to safeguard systems and sensitive data from increasingly sophisticated attacks.
RHC Dark Lab