magento-analytics Analysis

IOB - Indicator of Behavior (63)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en52
zh6
es2
it2
fr2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

us46
cn10
gb6
au2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

PHP6
Apache CXF4
node-ipc2
vBulletin2
SWsoft Plesk2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemCTIEPSSCVE
1Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure5.35.2$5k-$25k$0-$5kHighWorkaround0.040.04187CVE-2007-1192
2DZCP deV!L`z Clanportal config.php code injection7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.980.04187CVE-2010-0966
3Wireless IP Camera WIFICAM ini File access control7.57.2$0-$5k$0-$5kNot DefinedOfficial Fix0.050.00885CVE-2017-8225
4HP DeskJet 3630 cross-site request forgery6.26.2$5k-$25k$0-$5kNot DefinedNot Defined0.050.00885CVE-2019-6319
5Oracle HTTP Server SSL Module out-of-bounds write9.89.6$100k and more$25k-$100kNot DefinedOfficial Fix0.030.03032CVE-2022-23943
6Zoho ManageEngine Desktop Central ZIP Archive improper authentication6.36.0$0-$5k$0-$5kNot DefinedOfficial Fix0.020.00885CVE-2021-44757
7Zoho ManageEngine ServiceDesk Plus MSP web.xml path traversal6.56.4$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00885CVE-2022-32551
8SUSE Rancher improper authorization7.57.5$5k-$25k$0-$5kNot DefinedOfficial Fix0.020.00885CVE-2022-31247
9Rabbitmq Docker Image hard-coded password9.89.8$0-$5k$0-$5kNot DefinedOfficial Fix0.030.01055CVE-2020-35196
10JetBrains IntelliJ IDEA Privilege Escalation6.36.0$0-$5k$0-$5kNot DefinedOfficial Fix0.030.00885CVE-2021-45977
11Oracle Communications Policy Management CMP code injection9.89.6$25k-$100k$25k-$100kNot DefinedOfficial Fix0.010.95668CVE-2022-22965
12Microsoft Windows Hyper-V Privilege Escalation8.07.3$100k and more$5k-$25kUnprovenOfficial Fix0.020.01877CVE-2022-24537
13Watchguard Firebox/XTM Remote Code Execution6.36.0$0-$5k$0-$5kNot DefinedOfficial Fix0.060.15362CVE-2022-26318
14node-ipc backdoor8.07.9$0-$5k$0-$5kNot DefinedOfficial Fix0.000.01108CVE-2022-23812
15Cisco ASA SSL VPN exceptional condition5.45.1$5k-$25k$0-$5kNot DefinedOfficial Fix0.040.01055CVE-2019-12677
16Openfind Mail2000 Access Control privileges management6.06.0$0-$5k$0-$5kNot DefinedNot Defined0.000.00885CVE-2020-12776
17Oracle Graph Server and Client Packaging/install issues Remote Code Execution8.38.1$25k-$100k$0-$5kNot DefinedOfficial Fix0.010.01537CVE-2021-2351
18vBulletin redirector.php6.66.6$0-$5k$0-$5kNot DefinedNot Defined0.300.00885CVE-2018-6200
19SWsoft Plesk Login login.php3 path traversal5.34.8$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.020.06790CVE-2007-2268
20Zabbix Server command injection7.77.3$0-$5k$0-$5kNot DefinedOfficial Fix0.060.43761CVE-2017-2824

IOC - Indicator of Compromise (10)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (12)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueVulnerabilitiesAccess VectorTypeConfidence
1T1006CWE-22Pathname TraversalpredictiveHigh
2T1059CWE-94Cross Site ScriptingpredictiveHigh
3T1059.007CWE-79, CWE-80Cross Site ScriptingpredictiveHigh
4TXXXXCWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveHigh
5TXXXX.XXXCWE-XXXXxx Xx Xxxx-xxxxx XxxxxxxxpredictiveHigh
6TXXXXCWE-XXXxxxxxx XxxxxxxxxpredictiveHigh
7TXXXX.XXXCWE-XXXXxxx XxxxxxxxpredictiveHigh
8TXXXXCWE-XXX7xx Xxxxxxxx XxxxxxxxpredictiveHigh
9TXXXXCWE-XXXxx XxxxxxxxxpredictiveHigh
10TXXXX.XXXCWE-XXXXxxxxxxx XxxxxxxxxxxxxpredictiveHigh
11TXXXX.XXXCWE-XXXXxxxxxxxpredictiveHigh
12TXXXXCWE-XXXXxxxxxxxxxxxxpredictiveHigh

IOA - Indicator of Attack (23)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File//predictiveLow
2File/interceptor/OutgoingChainInterceptor.javapredictiveHigh
3File/uncpath/predictiveMedium
4File/xx-xxxxx/xxxxx-xxxx.xxxpredictiveHigh
5Filexxxxxxxxx.xpredictiveMedium
6Filexxxxxxx_xxx.xxxpredictiveHigh
7Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveHigh
8Filexxxx.xxxpredictiveMedium
9Filexxx/xxxxxx.xxxpredictiveHigh
10Filexxxxx.xxxpredictiveMedium
11Filexxxxx.xxxxpredictiveMedium
12Filexxxxxxxxxx.xxxpredictiveHigh
13Filexxxxxxxx.xxxpredictiveMedium
14Filexxxxxx.xxxpredictiveMedium
15Filexxxxxx/xxx.xxxpredictiveHigh
16ArgumentxxxxpredictiveLow
17ArgumentxxxxxxxxpredictiveMedium
18Argumentxxxxxxxxx-xxxxxxx/xxxxxxxxx/xxxxxxxxxxpredictiveHigh
19Argumentxxxxxx_xxpredictiveMedium
20ArgumentxxxxxxxxpredictiveMedium
21ArgumentxxpredictiveLow
22ArgumentxxxxxxxxpredictiveMedium
23ArgumentxxxpredictiveLow

References (4)

The following list contains external sources which discuss the actor and the associated activities:

Do you know our Splunk app?

Download it now for free!