- Download 360 total security free how to#
- Download 360 total security free full version#
- Download 360 total security free install#
- Download 360 total security free code#
- Download 360 total security free Pc#
The embedded shellcode can either be a Cobalt Strike stager or a complex batch command capable of stealing credentials, and downloading and running other scripts and files. Water Labbu reuses the available code, obfuscates it with one or more layers of obfuscation ( sojson.v4, 5), before executing the custom shellcode. The Metasploit module for this vulnerability is publicly available. The “tongji.js” script is a JavaScript containing CVE-2021-21220 exploit code, with a shellcode that is a Cobalt Strike stager.
Download 360 total security free code#
These files are hosted inside Water Labbu’s code repository. The last stage involves the creation and loading of a new script called “tongji.js,” which in Chinese means 痛擊 (to deliver a punishing attack). When the weaponized HTML pages detect a vulnerable target, it will proceed with loading additional stages of the attack. It’s likely that these are the lures Water Labbu used to communicate with the targeted cryptocurrency scam websites. If the User-Agent does not match, it will either redirect victims to the official MeiQia website or create a new iframe to load screenshots from banking or cryptocurrency transactions. It also detects the strings “0.0.8 Chrome/83,” “s/0.0.7,” or “s/0.0.6,” to identify if it is running inside a vulnerable version of Chromium or MeiQia application.
The script detects strings such as “electron” and “圆4” to discover Electron-based applications and 圆4 architecture. The weaponized HTML pages contain JavaScript that uses the User-Agent to identify whether the environment of the victim is vulnerable. The latest version of MeiQia is not vulnerable because it runs on the newer version of Chromium core and also opens the external links, not inside the ElectronJS app, but via the default system web browser.
Review of the code shows that old versions of MeiQia open external links inside their ElectronJS applications and render the web page without sandboxing. The initial scammers used an old version of MeiQia, which might be vulnerable to exploits. We found weaponized HTML pages created by Water Labbu that leverages the same Chromium vulnerability to attack the MeiQia application.
In this scenario, it leveraged cross-site scripting (XSS) techniques to force the exploit to be rendered in a window without sandboxing. A recent research paper on Electron security demonstrated a successful exploitation of an Electron-based application using CVE-2021-21220. installed on your PC.The infection is initiated when) the initial scammer (in essence, the victim) opens a weaponized webpage (likely sent to them via livechat).
Download 360 total security free full version#
Download 360 total security free install#
Download 360 total security free how to#
If you don’t know how to extract it, see this article. This might take from a few minutes to a few hours, depending on your download speed. Click on the download button(s) below and finish downloading the required files.How to Download and Install 360 Total Security v10. The main features of 360 Total Security are:ģ60 Total Security v10. Each mode offers a different level of protection from malware, phishing attacks, and backdoors. Protection offers 4 different user-selectable modes – Performance/Balanced/Security and Custom. Integrating award-winning antivirus engines from 360 Cloud Scan Engine,360 QVMII AI Engine, QEX, and KunPeng to provide you with the ultimate in Virus detection and protection capabilities.Ĭleanup frees your disk space by removing junk files and plugins, which can improve system performance – With cleanup you can decide which areas and files to clean.
Download 360 total security free Pc#
Clean-up utility is just one click away to keep your PC in optimal condition. Whether you are shopping online, downloading files or chatting with your friends you can be sure that 360 Total Security is there to keep you safe and your computer optimized.
About the softwareģ60 Total Security offers your PC complete protection from Viruses, Trojans and other emerging threats. Follow the direct download link and instructions below for guidance on installing 360 Total Security v10. This article shows you how to download and install the full version of 360 Total Security v10.
0 kommentar(er)
