Attack Case against HFS (HTTP File Server) Server (Suspected CVE-2024-23692)
Essential information
- Published
- 03/07/2024 11:39
- Modified
- 03/07/2024 11:54
- Tags
- 2024-07-03 CVE-2024-23692 backdoor cobaltstrike destroyrat exploit gh0strat gothief korplug plugx rat vulnerability xenorat xmrig
- Related entities
- 1 vulnerabilities (cve), 14 observables, 19 techniques (mitre), 8 malware
Description
A remote code execution vulnerability (CVE-2024-23692) in the HFS (HTTP File Server) program has allowed attackers to execute malicious commands on vulnerable systems. Various attack cases exploiting this vulnerability have been observed, leading to the installation of malware such as coin miners, RATs, backdoors, and information stealers. The attackers seem to be primarily Chinese-speaking threat actors.