CoinTicker Analysisinfo

IOB - Indicator of Behavior (18)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en18

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

GitLab Community Edition2
GitLab Enterprise Edition2
PHPMailer2
Siemens SIMATIC ET 200SP Open Controller CPU 1515S ...2
Siemens SIMATIC S7-1500 CPU2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemEPSSCTICVE
1Tridium Niagara AX/Niagra 4 path traversal6.76.7$0-$5k$0-$5kNot DefinedNot Defined0.001920.03CVE-2017-16744
2SheerDNS Directory_lookup path traversal5.34.8$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.000000.00
3Git Plugin Build authorization6.56.5$0-$5k$0-$5kNot DefinedNot Defined0.084380.05CVE-2022-36883
4GenieACS UI Interface API api.ts os command injection6.36.0$0-$5k$0-$5kNot DefinedOfficial Fix0.937100.05CVE-2021-46704
5phpMyAdmin Privileges.php sql injection7.17.0$5k-$25k$0-$5kNot DefinedOfficial Fix0.001340.04CVE-2020-10804
6Apache HTTP Server mod_rewrite redirect6.76.7$5k-$25k$5k-$25kNot DefinedNot Defined0.009890.42CVE-2020-1927
7Cisco ASA/Firepower Threat Defense Web Services Interface path traversal8.27.8$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.972700.07CVE-2020-3187
8CIPPlanner CIPAce HealthPage.aspx information disclosure5.35.3$0-$5k$0-$5kNot DefinedNot Defined0.001460.00CVE-2020-11590
9OTRS Community Edition Login Screen config3.53.5$0-$5kCalculatingNot DefinedNot Defined0.001230.00CVE-2020-1769
10Micro Focus Service Manager Automation sql injection7.57.5$0-$5k$0-$5kNot DefinedNot Defined0.000820.00CVE-2020-9521
11GitLab Community Edition/Enterprise Edition Docker Images authorization6.96.9$0-$5k$0-$5kNot DefinedNot Defined0.000850.00CVE-2020-10952
12cPanel Account Suspension authorization5.95.7$0-$5k$0-$5kNot DefinedOfficial Fix0.000540.00CVE-2019-20491
13Siemens SIMATIC S7-1500 resource consumption6.46.3$5k-$25k$0-$5kNot DefinedOfficial Fix0.001240.00CVE-2019-19281
14Microsoft SQL Server input validation7.57.2$25k-$100k$0-$5kNot DefinedOfficial Fix0.025130.04CVE-2019-1068
15Asus RT-AC3200 appGet.cgi command injection8.58.2$0-$5k$0-$5kProof-of-ConceptNot Defined0.498030.03CVE-2018-14714
16PHPMailer class.phpmailer.php sendCommand input validation7.37.0$0-$5k$0-$5kNot DefinedOfficial Fix0.003650.00CVE-2015-8476
17OpenSSH scp input validation5.35.1$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.002290.05CVE-2019-6111

IOC - Indicator of Compromise (2)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP addressHostnameActorCampaignsIdentifiedTypeConfidence
194.156.189.77seednode3.parsicoin.netCoinTicker10/30/2018verifiedLow
2XXX.XXX.XXX.XXXXxxxxxxxxx10/30/2018verifiedLow

TTP - Tactics, Techniques, Procedures (6)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueClassVulnerabilitiesAccess VectorTypeConfidence
1T1006CAPEC-126CWE-22Path TraversalpredictiveHigh
2T1202CAPEC-136CWE-77, CWE-78Command Shell in Externally Accessible DirectorypredictiveHigh
3TXXXX.XXXCAPEC-XXXCWE-XXXXxxx XxxxxxxxpredictiveHigh
4TXXXXCAPEC-XXXCWE-XXXxx XxxxxxxxxpredictiveHigh
5TXXXXCAPEC-XXXCWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveHigh
6TXXXX.XXXCWE-XXXxxxxxxxxxxxxpredictiveHigh

IOA - Indicator of Attack (7)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1FileappGet.cgipredictiveMedium
2Fileclass.phpmailer.phppredictiveHigh
3Filexxxxxxxxxx.xxxxpredictiveHigh
4Filexxxxxxxxx/xxxxxxx/xxxxxx/xxxxxxxxxx.xxxpredictiveHigh
5Libraryxxx/xx/xxx.xxpredictiveHigh
6ArgumentxxxxpredictiveLow
7Argumentxxxx_xxxxxxpredictiveMedium

References (2)

The following list contains external sources which discuss the actor and the associated activities:

This view requires CTI permissions

Just purchase a CTI license today!