{
  "name": "Your Connection, Their Cash: Threat Actors Misuse SDKs to Sell Your Bandwidth",
  "slug": "your-connection-their-cash-threat-actors-misuse-sdks-to-sell-your-bandwidth",
  "description": "Palo Alto Networks has identified and identified a threat that is exploiting a critical vulnerability in the GeoServer database, which allows criminals to gain passive income from exploiting victims' internet bandwidth and access to their bandwidth.",
  "published": "2025-08-21T19:01:22+00:00",
  "created_at": "2025-08-21T19:01:22+00:00",
  "modified_at": "2025-08-21T19:33:41+00:00",
  "created_at_opencti": "2025-08-21T19:01:22+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2025-08-21",
    "CVE-2024-36401",
    "apache",
    "cve202436401",
    "dart",
    "geoserver",
    "ip address",
    "jxpath",
    "persistence",
    "sdk"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "64.226.112.52"
      },
      {
        "id": "",
        "name": "37.187.74.75"
      },
      {
        "id": "",
        "name": "185.246.84.189"
      },
      {
        "id": "",
        "name": "http://64.226.112.52:8080/rKS64mUmF7/d593"
      },
      {
        "id": "",
        "name": "http://64.226.112.52:8080/vbbdG8dpAw/s401"
      },
      {
        "id": "",
        "name": "http://64.226.112.52:8080/fAFUQgw7Py/c401"
      },
      {
        "id": "",
        "name": "http://64.226.112.52:8080/g1Gl1JWEUw/d401"
      },
      {
        "id": "",
        "name": "http://64.226.112.52:8080/cxtpjeM3KU/a402"
      },
      {
        "id": "",
        "name": "http://64.226.112.52:8080/YbEYCqCFVl/z401"
      },
      {
        "id": "",
        "name": "http://64.226.112.52:8080/XEQS3MTzdS/a593"
      },
      {
        "id": "",
        "name": "http://64.226.112.52:8080/W7lJoMcuOu/s402"
      },
      {
        "id": "",
        "name": "http://64.226.112.52:8080/MFTYFuqKGU/a401"
      },
      {
        "id": "",
        "name": "http://64.226.112.52:8080/LuoHgydq6F/c593"
      },
      {
        "id": "",
        "name": "http://64.226.112.52:8080/AORGz7zIzn/d402"
      },
      {
        "id": "",
        "name": "http://64.226.112.52:8080/6mXfFz7ltE/s593"
      },
      {
        "id": "",
        "name": "http://64.226.112.52:8080/1Vt9KBLEFr/z402"
      },
      {
        "id": "",
        "name": "http://64.226.112.52:8080/0rX20C97S6/c402"
      },
      {
        "id": "",
        "name": "http://64.226.112.52:8080/09KvYAUSHm/z593"
      },
      {
        "id": "",
        "name": "http://64.226.112.52:8080"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/zJ03zmSrz6/s402"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/wHNOFLazdK/glog"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/wlLiXFNtjU/hlog"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/w1wOYGVLEX/a101"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/vPN5rgRMTz/wlog"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/vLs5vxpDgV/c593"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/uCX4Nl2Pwu/z402"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/kGQtGhOpCP/elog"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/iKA3jGXk6x/d193"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/gmhm4lmSLO/plog"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/fK4SCflkNg/d401"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/ei0Ul7l75J/e193"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/cE58oqrYGO/a193"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/a8HejAHngH/c402"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/YDjV1ocro3/a401"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/Y1WT747MRP/d402"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/XA8Dkr1CJ4/dlog"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/TMuAS1wp8m/d102"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/T8VevroEJT/z401"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/QF8plwpY8Y/s401"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/JadF0ucQNf/a593"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/KaMJw2fsDW/d101"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/IyxzymKCp2/a102"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/H0cwXMzCrJ/d593"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/Do4YwzvAJN/alog"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/DQ5ydzkPnK/c401"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/7kS5qiHwg8/e102"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/52F6SqfuuS/e101"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/3twwHaJzxo/z593"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/3pHrSu54Pf/slog"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/3g5eBN8nqv/a402"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080/22mINruojN/s593"
      },
      {
        "id": "",
        "name": "http://37.187.74.75:8080"
      },
      {
        "id": "",
        "name": "fc28f97f818d07fd8824333de26e5a0ca0d3fe7233d86f7e227e4838cfea0ca4"
      },
      {
        "id": "",
        "name": "fa2687f94955fbdc2c41f1cff8c7df24937aeb942e4d7856bf2ff52ebf2e61aa"
      },
      {
        "id": "",
        "name": "e25d6134c6a0573ded1d340f609dd71d15934ca165ea79d47898aa37a5185415"
      },
      {
        "id": "",
        "name": "f340abe5689e51cf78b10165cb93ab8a2988d0fedd0e74c74fc23ac2dca93a13"
      },
      {
        "id": "",
        "name": "e0b886a39cf098a3c7daa021c7af022b0ceb6edcf3fa49e3c3b8f70b843423c2"
      },
      {
        "id": "",
        "name": "dec84a568b6393ccd863bb38851a76f54de6f59193660e4b88aa1f941b744469"
      },
      {
        "id": "",
        "name": "cdae958629383c4dba22a115615d8a63211bbccb06335cd1c4b5e2c2aa3fee77"
      },
      {
        "id": "",
        "name": "bbdda70f0c4a3de4ec955e134ad46895ac931e21b930837a85633277128ab7d2"
      },
      {
        "id": "",
        "name": "b381e8355cf3a432e63064897cc7719e8b9c38e91c6151cd1e7aed4cd219a75b"
      },
      {
        "id": "",
        "name": "b66c64ccd7b9c96fad53f6d3aa0441e46eca899ad8d97964573e41c94fccddba"
      },
      {
        "id": "",
        "name": "ae706c149497c2fc809682e8827996ea3ceb7bcecddd87be7543d1dca4853470"
      },
      {
        "id": "",
        "name": "a852133ff7f24b14e4224e7052f6d309353b4838fe5f17d25c712d7a1dd6e80a"
      },
      {
        "id": "",
        "name": "a13a07d15d94c996d8b7e8ed633073f6a3e2268a8d14363f16ad48160b85df08"
      },
      {
        "id": "",
        "name": "97c8ec63766ce63b8ace283928922cfceb7c8f3bc72edcbd255e157a1afb15fe"
      },
      {
        "id": "",
        "name": "8b25144ad17d023f67477be4791db45d9197d7cfb666b3a5ccc1b1c0e4bae3af"
      },
      {
        "id": "",
        "name": "9515df36a6d16c0a9fcca680d6b181539d80efd4cda85dacbfb30127a7f11736"
      },
      {
        "id": "",
        "name": "915d1bb1000a8726df87e0b15bea77c5476e3ec13c8765b43781d5935f1d2609"
      },
      {
        "id": "",
        "name": "84ee11f40da3538e4601456912c3efa0e92a903948812fd17fe650c5f7ac33ad"
      },
      {
        "id": "",
        "name": "8aafb9965e946e5d4be085a1373abc750a1488ff78e6e082cc36ff20ff328465"
      },
      {
        "id": "",
        "name": "89f5e7d66098ae736c39eb36123adcf55851268973e6614c67e3589e73451b24"
      },
      {
        "id": "",
        "name": "7c18fe9da63c86f696f9ad7b5fcc8292cac9d49973ba12050c0a3a18b7bd1cc9"
      },
      {
        "id": "",
        "name": "7c0c69aa0dcfc937c1fef8d42c74f7e46d128898c1d99d3362f2d18397be36ae"
      },
      {
        "id": "",
        "name": "7620f22a5ed1a8ac2a1da732e55e14a13197b631e5abba6431f88e5cfa3ae2de"
      },
      {
        "id": "",
        "name": "6dd6751bae92dfa504f0ad5558ab8adfdfba3df5a7f218245627574bfac39f11"
      },
      {
        "id": "",
        "name": "6db4b685f413a3e02113677eee10a29c7406414f7f4da611f31d13e3f595f85d"
      },
      {
        "id": "",
        "name": "663970530e764f91b0be43936331e6c0a93610db6b86c6c4b64de270ae4d4630"
      },
      {
        "id": "",
        "name": "4fd789a19db35e054a5135466d610452bea607a11b7ec765b5474847c22e637c"
      },
      {
        "id": "",
        "name": "5bc5dfeaeb43fb1e967cad028f8d2c48f5db17ee6c23c383faee74455c2f1f33"
      },
      {
        "id": "",
        "name": "4e4a467abe1478240cd34a1deaef019172b7834ad57d46f89a7c6c357f066fdb"
      },
      {
        "id": "",
        "name": "491f5af9d29f52a6df026159a8ebd27ee6e27151ea78c4782eb05b2c5d39bfc3"
      },
      {
        "id": "",
        "name": "4e40a0df8f4ba4a87ab8fc64950c67f6725a7e8f14a0a84a4ed79b3a8924ba19"
      },
      {
        "id": "",
        "name": "43b49294b778d4489c69922ff3aca27964a04e0f08bcc830108dc83261a0b205"
      },
      {
        "id": "",
        "name": "3fd7794be80782b11a09f51ac8cbf2147e9d79303923f279d610ee45e12506eb"
      },
      {
        "id": "",
        "name": "3d7ac752bb0d54802f2def38f44e10854f70ab5a9a001b5c39ab0531b9ed74bf"
      },
      {
        "id": "",
        "name": "357ca4ad31132ad4bd605e3217968819b04d577884a4e9dd760ed0182c4609ed"
      },
      {
        "id": "",
        "name": "2c5581572ec4877df8ec3e5d2b30bfff5718ecd27d8b3dbe2f393aa5821e7ddd"
      },
      {
        "id": "",
        "name": "33aad585d6280d1921b5f46f8894ee05d426c7751c2133ed5484bf65af587576"
      },
      {
        "id": "",
        "name": "2b176eb8afa0b089ee8fb072c68c6fdcfe4b2f034c776cc32064f26c0e6c69a3"
      },
      {
        "id": "",
        "name": "0e2b92991186bc8a817e0187a9b58928969350bc8d8ad7e6b6cd91c185a7e03c"
      },
      {
        "id": "",
        "name": "2aa6f95dbe8d17e8e70db677808c96ee956c36b7cc8f274435173cfed0b1f5af"
      },
      {
        "id": "",
        "name": "0971264967ba8d461ce98f86b90810493c5e22fc80bf61f0d0eb7a2599a7f77a"
      },
      {
        "id": "",
        "name": "085da541d7555ac6afcacd5899027c3fa4132c1eccfb3d8223794c4e0e3eb361"
      }
    ],
    "vulnerabilities": [
      {
        "id": "",
        "name": "CVE-2025-49706"
      },
      {
        "id": "",
        "name": "CVE-2025-49704"
      },
      {
        "id": "",
        "name": "CVE-2025-31324"
      },
      {
        "id": "",
        "name": "CVE-2025-32433"
      },
      {
        "id": "",
        "name": "CVE-2024-8299"
      },
      {
        "id": "",
        "name": "CVE-2024-7587"
      },
      {
        "id": "",
        "name": "CVE-2024-1182"
      },
      {
        "id": "",
        "name": "CVE-2024-36401"
      }
    ]
  },
  "external_refs": [
    "https://unit42.paloaltonetworks.com/attackers-sell-your-bandwidth-using-sdks/",
    "https://otx.alienvault.com/pulse/68a78923f923670ab62bb240"
  ]
}