DNSLock Analysisinfo

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (11)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Language

fr	10
en	2

Country

US: USA	12

Actors

DNSLock	2

Activities

Interest

Timeline

Type

Not Defined	10
Wireless LAN Software	2

Vendor

SAP	10
Netgear	2

Product

SAP 3D Visual Enterprise Viewer	8
Netgear R6120	2
Netgear R6080	2
Netgear R6260	2
Netgear R6220	2

Vulnerabilities

These are the vulnerabilities that we have identified as researched, approached, or attacked.

#	Vulnerability	Base	Temp	0day	Today	Exp	Cou	EPSS	CTI	CVE
1	foreman-debug Log File Password credentials management	5.9	5.9	$0-$5k	$0-$5k	Not defined	Official fix	0.00168	0.00	CVE-2016-9593
2	Netgear R6120/R6080/R6260/R6220/R6020/JNR3210/WNR2020 mini_httpd Service improper authentication	5.4	5.4	$5k-$25k	$0-$5k	Not defined	Not defined	0.00299	0.00	CVE-2020-17409
3	Foxit PhantomPDF U3D Object information disclosure	3.8	3.8	$0-$5k	$0-$5k	Not defined	Not defined	0.03774	0.02	CVE-2020-17411
4	Foxit PhantomPDF U3D Object information disclosure	6.0	6.0	$0-$5k	$0-$5k	Not defined	Not defined	0.04567	0.03	CVE-2020-17412
5	SAP Business Planning and Consolidation cross site scripting	4.4	4.4	$0-$5k	$0-$5k	Not defined	Not defined	0.00384	0.02	CVE-2020-6368
6	SAP NetWeaver Application Server ABAP information disclosure	4.3	4.3	$5k-$25k	$0-$5k	Not defined	Not defined	0.00302	0.00	CVE-2020-6371
7	SAP 3D Visual Enterprise Viewer PDF File denial of service	6.0	6.0	$5k-$25k	$0-$5k	Not defined	Not defined	0.00226	0.00	CVE-2020-6372
8	SAP 3D Visual Enterprise Viewer PDF File denial of service	6.0	6.0	$5k-$25k	$0-$5k	Not defined	Not defined	0.00226	0.02	CVE-2020-6373
9	SAP 3D Visual Enterprise Viewer JT File denial of service	6.0	6.0	$5k-$25k	$0-$5k	Not defined	Not defined	0.00226	0.00	CVE-2020-6374
10	SAP 3D Visual Enterprise Viewer CGM File denial of service	4.9	4.9	$5k-$25k	$0-$5k	Not defined	Not defined	0.00143	0.01	CVE-2020-6375
11	SAP 3D Visual Enterprise Viewer RH File denial of service	4.5	4.5	$0-$5k	$0-$5k	Not defined	Not defined	0.00143	0.00	CVE-2020-6376

IOC - Indicator of Compromise (6)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Identified	Type	Confidence
1	18.220.249.233	ec2-18-220-249-233.us-east-2.compute.amazonaws.com	DNSLock	04/08/2022	verified	Very Low
2	52.77.199.193	ec2-52-77-199-193.ap-southeast-1.compute.amazonaws.com	DNSLock	04/08/2022	verified	Very Low
3	XX.XXX.XXX.XX	xxx-xx-xxx-xxx-xx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx	04/08/2022	verified	Very Low
4	XX.XXX.XXX.XXX	xxx-xx-xxx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx	04/08/2022	verified	Very Low
5	XX.XXX.XX.XX		Xxxxxxx	04/08/2022	verified	Low
6	XX.XXX.XXX.XXX		Xxxxxxx	04/08/2022	verified	Low

TTP - Tactics, Techniques, Procedures (3)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1059.007	CAPEC-209	CWE-79	Basic Cross Site Scripting	predictive	High
2	TXXXX		CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
3	TXXXX	CAPEC-XXX	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High

References (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

This view requires CTI permissions

Just purchase a CTI license today!