216.73.217.22

Earth Lamia

· Published 21/12/2025 14:26 · Modified 21/12/2025 14:26 · Source: AlienVault

Essential information

Confidence
100/100
Published
21/12/2025 14:26
Modified
21/12/2025 14:26
Updated at
21/12/2025 14:26
Revoked
No
Author / Source
AlienVault
Resource level
—
Primary motivation
—
Related entities
1 reports, 19 attack patterns (mitre), 5 malware, 6 sectors, 3 countries, 158 indicators, 9 vulnerabilities (cve)

Description

No description.

Marking (TLP)

TLP:CLEAR

Related entities

Attack patterns, malware, vulnerabilities, indicators and other entities linked to this intrusion set.

Reports (1)

Attack patterns (MITRE) (19)

Malware (5)

  • VSHELL uses
    Family
    Published 05/05/2026 14:07 · Modified 05/05/2026 14:07
  • BypassBoss uses
    Family
    Published 27/05/2025 10:35 · Modified 27/05/2025 10:35
  • PULSEPACK uses
    Family
    Published 28/01/2026 13:31 · Modified 28/01/2026 13:31
  • Brute Ratel uses
    Family
    Published 27/05/2025 10:35 · Modified 27/05/2025 10:35
  • Cobalt Strike - S0154 uses
    AlienVault Confidence 100
    First seen 01/01/1970 · Last seen 16/11/5138 Published 20/12/2025 19:39 · Modified 27/05/2026 21:40

Sectors (6)

  • Retail targets
  • Technology targets
  • Government targets
  • Finance targets
  • Transportation targets
  • Education targets

Countries (3)

  • British Indian Ocean Territory targets
  • Brazil targets
  • India targets

Indicators (158)

Vulnerabilities (CVE) (9)

CVE-2024-56145 KEV
9.8 Critical

Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Users of affected versions are affected …

Attack vector
Network
Published
02/06/2025
Modified
21/12/2025
Awaiting Analysis
CVE-2025-31324 KEV
10.0 Critical

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries …

Attack vector
Network
Published
29/04/2025
Modified
21/12/2025
Received
CVE-2024-9047
9.8 Critical

The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.11 via wfu_file_downloader.php. …

Attack vector
NETWORK
Published
12/10/2024
Modified
21/12/2025
Awaiting Analysis
CVE-2024-27198 KEV
9.8 Critical

JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.

Attack vector
Network
Published
07/03/2024
Modified
21/12/2025
CVE-2024-51567 KEV
10.0 Critical

upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus …

Attack vector
Network
Published
07/11/2024
Modified
21/12/2025
Analyzed
CVE-2021-22205 KEV

GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code execution. Workhorse …

Published
03/11/2021
Modified
20/12/2025
CVE-2024-51378 KEV
10.0 Critical

getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authentication and execute arbitrary commands …

Attack vector
Network
Published
04/12/2024
Modified
21/12/2025
Awaiting Analysis
CVE-2024-27199 KEV
7.3 High

JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed.

Attack vector
NETWORK
Complexity
LOW
Published
04/03/2024
Modified
22/04/2026
CVE-2017-9805 KEV
8.1 High

Apache Struts REST Plugin uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to …

Attack vector
NETWORK
Complexity
HIGH
Published
15/09/2017
Modified
22/04/2026