Jack Walsh
3 articles
-
BlogReact2Shell「CVE-2025-55182」の分析、PoCを巡る混乱と悪用の広がり
脆弱性「CVE-2025-55182」は、React Server Components に影響する、CVSS 10.0の事前認証型リモートコード実行の脆弱性です。多数に及ぶ偽の概念実証（PoC：Proof-of-Concept）、スキャナー、攻撃コード、誤解があふれる状況の中で、本稿ではこれらの実態について解説します。
December 10th, 2025 21 minPeter Girnus, Deep Patel, Jack Walsh, Lucas Silva…
Read article -
BlogSocGholish’s Intrusion Techniques Facilitate Distribution of RansomHub Ransomware
Trend Research analyzed SocGholish’s MaaS framework and its role in deploying RansomHub ransomware through compromised websites, using highly obfuscated JavaScript loaders to evade detection and execute various malicious tasks.
March 14th, 2025 16 minAdam O'Connor, Ian Kenefick, Jack Walsh, Lucas Silva…
Read article -
BlogBlack Basta and Cactus Ransomware Groups Add BackConnect Malware to Their Arsenal
In this blog entry, we discuss how the Black Basta and Cactus ransomware groups utilized the BackConnect malware to maintain persistent control and exfiltrate sensitive data from compromised machines.
March 3rd, 2025 12 minCatherine Loveria, Stephen Carbery, Jovit Samaniego, Adam O'Connor…
Read article