Tag: vulnerability exploitation
Attack reports, vulnerabilities, indicators and intrusion sets linked to vulnerability exploitation.
Attack reports (23)
- RondoDox Botnet: From Zero to 174 Exploited Vulnerabilities · Published 11/03/2026 15:49 · Modified 16/03/2026 09:52
- MuddyWater Exposed: Inside an Iranian APT operation · Published 05/03/2026 15:18 · Modified 05/03/2026 15:50
- Metro4Shell: Exploitation of React Native's Metro Server in the Wild · Published 04/02/2026 11:13 · Modified 04/02/2026 21:20
- RondoDoX Botnet Weaponizes React2Shell · Published 29/12/2025 19:53 · Modified 29/12/2025 21:51
- Sneeit WordPress RCE Exploited in the Wild While ICTBroadcast Bug Fuels Frost … · Published 09/12/2025 12:50 · Modified 21/12/2025 18:50
- Case of ActiveMQ Vulnerability Exploitation to Install Sharpire (Kinsing) · Published 31/10/2025 09:30 · Modified 31/10/2025 10:56
- UNC1151 exploiting Roundcube to steal user credentials in a spearphishing campaign · Published 05/06/2025 22:36 · Modified 08/06/2025 16:33
- Custom Arsenal Developed to Target Multiple Industries · Published 27/05/2025 10:35 · Modified 27/05/2025 13:56
- Mass Scanning and Exploit Campaigns · Published 16/05/2025 08:51 · Modified 21/05/2025 21:05
- The Persistent Threat of Salt Typhoon: Tracking Exposures of Potentially Targeted Devices · Published 26/04/2025 01:52 · Modified 28/04/2025 08:52
- Lazarus APT updates its toolset in watering hole attacks · Published 24/04/2025 08:13 · Modified 24/04/2025 13:41
- Dragon RaaS | Pro-Russian Hacktivist Group Aims to Build on "The Five … · Published 19/03/2025 20:40 · Modified 20/03/2025 09:43
- Malicious Packages Identified in the Wild: Insights and Trends from November 2024 … · Published 10/03/2025 20:29 · Modified 11/03/2025 12:03
- PolarEdge: Unveiling an uncovered ORB network · Published 25/02/2025 10:03 · Modified 25/02/2025 12:12
- The BadPilot campaign: Multiyear global access operation · Published 12/02/2025 22:29 · Modified 13/02/2025 10:13
- Matrix Unleashes A New Widespread DDoS Campaign · Published 27/11/2024 18:19 · Modified 27/11/2024 18:32
- Threat Campaign Targeting Palo Alto Networks Firewall Devices Observed · Published 25/11/2024 16:01 · Modified 25/11/2024 17:28
- Inside Water Barghest's Rapid Exploit-to-Market Strategy for IoT Devices · Published 18/11/2024 14:21 · Modified 18/11/2024 16:38
- Mozi Resurfaces as Androxgh0st Botnet: Unraveling The Latest Exploitation Wave · Published 12/11/2024 08:47 · Modified 12/11/2024 09:28
- Akira ransomware continues to evolve · Published 22/10/2024 09:43 · Modified 22/10/2024 09:57
- From Automation to Exploitation: The Growing Misuse of Selenium Grid for Cryptomining … · Published 17/09/2024 11:14 · Modified 17/09/2024 11:28
- The Nanshou Campaign - Hackers' Arsenal Grows Stronger · Published 16/09/2024 10:26 · Modified 16/09/2024 10:58
- Examining Water Infection Routine Leading to an XMRig Cryptominer · Published 28/06/2024 07:39 · Modified 28/06/2024 07:57