Bangladesh Embassy Website in Cairo Compromised

guest · Feb 27, 2019

Bangladesh Embassy Website in Cairo Compromised
February 27, 2019
https://www.trustwave.com/en-us/res...gladesh-embassy-website-in-cairo-compromised/

In the world of Phishing emails, we often see schemes which involve enticing users to open a malicious document, sometimes disguised as a form of some sort.
But what if the user is visiting a government site where forms are generally in abundance? It looks like this time attackers decided to try their luck and find out.

After a closer investigation we saw that the Bangladesh embassy in Cairo website appears to be under control of intruders. Attempts to access almost any URL on the website ends with a request to save a file, with only a few pieces of content (like the visa application form file) still accessible: [...]

This level of compromise usually indicates the attacker’s ability to not only upload their own data, but also change the web server’s configuration.
This office document contains an EPS file and exploits a use-after-free vulnerability, CVE-2017-0261.
Click to expand...

mirimir · Feb 27, 2019

Huh. So I downloaded "Conference_Details.doc". Opening it in gedit shows nothing. Using cat, I see something like a Word document header.

I wonder what it is.

Edit: Ah, I see:

This office document contains an EPS file and exploits a use-after-free vulnerability, CVE-2017-0261.
Click to expand...

Log in or Sign up

Bangladesh Embassy Website in Cairo Compromised

guest Guest

mirimir Registered Member

Log in or Sign up

Bangladesh Embassy Website in Cairo Compromised

guest Guest

mirimir Registered Member

Useful Searches