Sector Homeoffice

Timeframe: -28 days

Default Categories (32): Android App Software, Anti-Malware Software, Calendar Software, Digital Media Player, Document Processing Software, Document Reader Software, File Compression Software, File Transfer Software, Firewall Software, Game Console, Groupware Software, Hardware Driver Software, Image Processing Software, iOS App Software, Mail Client Software, Messaging Software, Multimedia Player Software, Network Attached Storage Software, Network Encryption Software, Office Suite Software, Operating System, Presentation Software, Printing Software, Remote Access Software, Router Operating System, Smartphone Operating System, Smartwatch Operating System, Spreadsheet Software, Tablet Operating System, Web Browser, Wireless LAN Software, Word Processing Software

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

Microsoft	92
Google	40
Linux	40
Not Defined	26
Apple	24

Product

Microsoft Windows	66
Linux Kernel	40
Microsoft Edge	24
Google Chrome	24
Google Android	16

Remediation

Official Fix	264
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	56

Exploitability

High	0
Functional	0
Proof-of-Concept	20
Unproven	68
Not Defined	232

Access Vector

Not Defined	0
Physical	2
Local	104
Adjacent	68
Network	146

Authentication

Not Defined	0
High	6
Low	202
None	112

User Interaction

Not Defined	0
Required	94
None	226

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	6
≤4	40
≤5	38
≤6	86
≤7	80
≤8	38
≤9	26
≤10	6

CVSSv3 Temp

≤1	0
≤2	0
≤3	8
≤4	46
≤5	54
≤6	132
≤7	32
≤8	40
≤9	4
≤10	4

VulDB

≤1	0
≤2	0
≤3	10
≤4	50
≤5	44
≤6	72
≤7	78
≤8	34
≤9	26
≤10	6

NVD

≤1	318
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	284
≤2	0
≤3	0
≤4	2
≤5	6
≤6	4
≤7	8
≤8	6
≤9	8
≤10	2

Vendor

≤1	252
≤2	0
≤3	0
≤4	0
≤5	0
≤6	4
≤7	20
≤8	20
≤9	22
≤10	2

Exploit 0-day

<1k	26
<2k	50
<5k	26
<10k	60
<25k	42
<50k	92
<100k	24
≥100k	0

Exploit Today

<1k	90
<2k	34
<5k	52
<10k	56
<25k	88
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

IOB - Indicator of Behavior (1000)

Timeline

Lang

en	784
it	102
fr	28
es	12
de	12

Country

it	156
us	122
gb	54
hu	38
fr	26

Actors

Qakbot	2
Dealply	1

Activities

Interest

Timeline

Type

Operating System	42
Web Browser	22
Smartphone Operating System	16
Router Operating System	12
Anti-Malware Software	12

Vendor

Microsoft	44
Linux	16
Samsung	12
Not Defined	8
Apple	6

Product

Microsoft Windows	24
Linux Kernel	16
Microsoft Edge	12
Samsung Smart Phone	12
DrayTek Vigor 2960	4

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	CTI	EPSS	CVE
1	Microsoft Windows ICMP Remote Code Execution	9.8	8.5	$50k-$100k	$10k-$25k	Unproven	Official Fix	6.94	0.00255	CVE-2023-23415
2	Max Secure Anti Virus Plus IoControlCode MaxProctetor64.sys denial of service	5.5	5.0	$2k-$5k	$0-$1k	Proof-of-Concept	Not Defined	2.23-	0.00000	CVE-2023-1493
3	Max Secure Anti Virus Plus IoControlCode SDActMon.sys access control	4.4	4.0	$2k-$5k	$0-$1k	Proof-of-Concept	Not Defined	2.19-	0.00000	CVE-2023-1490
4	Max Secure Anti Virus Plus IoControlCode MaxCryptMon.sys access control	4.4	4.0	$2k-$5k	$0-$1k	Proof-of-Concept	Not Defined	2.09-	0.00000	CVE-2023-1491
5	Max Secure Anti Virus Plus IoControlCode MaxProc64.sys denial of service	5.5	5.0	$2k-$5k	$0-$1k	Proof-of-Concept	Not Defined	1.94-	0.00000	CVE-2023-1492
6	Linux Kernel Attribute Name inode.c out-of-bounds write	5.5	5.3	$5k-$10k	$1k-$2k	Not Defined	Official Fix	1.80+	0.00000	CVE-2022-48424
7	Squidex cross site scripting	3.5	3.4	$1k-$2k	$0-$1k	Not Defined	Official Fix	1.75-	0.00043	CVE-2023-24278
8	Linux Kernel Attribute Name record.c mi_enum_attr out-of-bounds write	5.5	5.3	$5k-$10k	$1k-$2k	Not Defined	Official Fix	1.51+	0.00000	CVE-2022-48423
9	Linux Kernel Metadata inode.c ntfs_read_mft use after free	6.3	6.0	$5k-$10k	$2k-$5k	Not Defined	Official Fix	1.26+	0.00000	CVE-2022-48425
10	Netgate pfSense XML File config.xml restore_rrddata command injection	5.5	5.3	$1k-$2k	$0-$1k	Not Defined	Official Fix	0.53	0.00043	CVE-2023-27253
11	Microsoft Outlook Remote Code Execution	8.5	7.9	$10k-$25k	$2k-$5k	Functional	Official Fix	1.17	0.00943	CVE-2023-23397
12	Filseclab Twister Antivirus IoControlCode fildds.sys denial of service	6.5	5.9	$10k-$25k	$0-$1k	Proof-of-Concept	Not Defined	1.02	0.00045	CVE-2023-1443
13	Linux Kernel Reliable Datagram Sockets message.c rds_rm_zerocopy_callback out-of-bounds write	5.3	5.1	$2k-$5k	$2k-$5k	Not Defined	Official Fix	0.77	0.00000	CVE-2023-1078
14	Filseclab Twister Antivirus IoControlCode fildds.sys denial of service	7.5	6.8	$10k-$25k	$0-$1k	Proof-of-Concept	Not Defined	1.06	0.00045	CVE-2023-1444
15	Watchdog Anti-Virus IoControlCode wsdk-driver.sys access control	4.4	4.0	$2k-$5k	$0-$1k	Proof-of-Concept	Not Defined	1.01	0.00045	CVE-2023-1453
16	Watchdog Anti-Virus IoControlCode wsdk-driver.sys denial of service	5.5	5.0	$2k-$5k	$0-$1k	Proof-of-Concept	Not Defined	1.06	0.00045	CVE-2023-1446
17	Linux Kernel SCTP diag.c sctp_bind_addr_copy type confusion	3.5	3.4	$5k-$10k	$2k-$5k	Not Defined	Official Fix	0.68	0.00000	CVE-2023-1074
18	Linux Kernel tun/tap tap.c tap_open unnecessary privileges	8.0	7.6	$10k-$25k	$2k-$5k	Not Defined	Official Fix	0.78	0.00000	CVE-2023-1076
19	Linux Kernel tls_sw.c tls_is_tx_ready information disclosure	3.5	3.4	$5k-$10k	$1k-$2k	Not Defined	Official Fix	1.11	0.00000	CVE-2023-1075
20	Filseclab Twister Antivirus IoControlCode fildds.sys denial of service	3.3	3.0	$2k-$5k	$0-$1k	Proof-of-Concept	Not Defined	0.91	0.00045	CVE-2023-1445

IOC - Indicator of Compromise (10)

These indicators of compromise highlight associated network ranges which are known to be part of research and attack activities.

ID	IP range	Actor	Type	Confidence
1	23.154.177.0/24	B1txor20	predictive	High
2	XX.XX.XX.X/XX	Xxxxxxxxx	predictive	High
3	XX.XXX.XXX.X/XX	Xxxxxxx	predictive	High
4	XX.XX.XXX.X/XX	Xxxxxxxx	predictive	High
5	XX.XX.XXX.X/XX	Xxxxxx	predictive	High
6	XX.XX.XX.X/XX	Xxxxx	predictive	High
7	XXX.XXX.XXX.X/XX	Xxxxxxx	predictive	High
8	XXX.XXX.XX.X/XX	Xxxxxx Xxxxxx	predictive	High
9	XXX.XXX.XX.X/XX	Xxxxxx	predictive	High
10	XXX.XXX.XX.X/XX	Xxxxxxxxxxx Xxxxx	predictive	High

TTP - Tactics, Techniques, Procedures (17)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CWE-22, CWE-23	Pathname Traversal	predictive	High
2	T1055	CWE-74	Injection	predictive	High
3	T1059	CWE-94	Cross Site Scripting	predictive	High
4	T1059.007	CWE-79	Cross Site Scripting	predictive	High
5	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
6	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxxxxx Xxxxxxxx	predictive	High
7	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxxxxxx	predictive	High
8	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
9	TXXXX	CWE-XX	Xxx Xxxxxxxxx	predictive	High
10	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	High
11	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx	predictive	High
12	TXXXX.XXX	CWE-XXX	Xxxxxxxxxxxx	predictive	High
13	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	High
14	TXXXX	CWE-XXX	Xxxxxxxxxxxxx	predictive	High
15	TXXXX	CWE-XXX	X2xx Xxxxxxxxxxxxxxxx: Xxxx Xxxxxxxxxxxx Xxxxxxx Xxxxxxxxxx	predictive	High
16	TXXXX.XXX	CWE-XXX	Xxx Xx Xxxx Xxxx	predictive	High
17	TXXXX.XXX	CWE-XXX	Xxxxxxxxxxxx Xxxxxx	predictive	High

IOA - Indicator of Attack (88)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	/cgi-bin/mainfunction.cgi	predictive	High
2	File	/tmp/mulipartFile	predictive	High
3	File	AAVCAssembler.cpp	predictive	High
4	File	ActivityManagerService.java	predictive	High
5	File	AudioFlinger.cpp	predictive	High
6	File	binder.c	predictive	Medium
7	File	bits.c	predictive	Low
8	File	BluetoothSwitchPreferenceController.java	predictive	High
9	File	bugs.c	predictive	Low
10	File	ChooseTypeAndAccountActivity.java	predictive	High
11	File	config.xml	predictive	Medium
12	File	xxxxxxx/xxxxxxxxx/xxx_xxx.x	predictive	High
13	File	xxxxxxx/xxxx/xxx-xxx-xxxxxx.x	predictive	High
14	File	xxxxxxx/xxx/xxx/xxx/xxxxxx_xxxxxx.x	predictive	High
15	File	xxxxxxx/xxx/xxx/xxxxxx/xxxxxxx_xxxxxx.x	predictive	High
16	File	xxxxxxx/xxx/xxxxxxxx/xxxxxxxx/xxxx/xxxx/xxxxxxxx/xx_xxxxxx.x	predictive	High
17	File	xxxxxxx/xxx/xxx.x	predictive	High
18	File	xxxxxxx/xxx/xxxxx/xxxx.x	predictive	High
19	File	xxxxxxx/xxxx/xxx/xxx-xxxxxxxx.x	predictive	High
20	File	xxxxxxx/xxx/xxxx/xxxx_xxxx.x	predictive	High
21	File	xxxxxxx/xxx/xxx.x	predictive	High
22	File	xxxxxxx/xxx/xxxx/xxxx-xxxx.x	predictive	High
23	File	xxxxxxxxxxxxxxxx.xxxx	predictive	High
24	File	xxxxxxxxxxx-xxxx.xxxxxxx	predictive	High
25	File	xx/xxxx/xxxxxxx.x	predictive	High
26	File	xx/xx-xxxxxxxxx.x	predictive	High
27	File	xx/xxxx/xxxxxx.x	predictive	High
28	File	xx/xxxxx/xxxxxx.x	predictive	High
29	File	xx/xxxxx/xxxxx.x	predictive	High
30	File	xx/xxxxx/xxxxxx.x	predictive	High
31	File	xx/xxxxx/xxx.x	predictive	High
32	File	xxxxxxxxxxx.xx	predictive	High
33	File	xxxxxx/xxxxxx/xxxxxxxxxx.x	predictive	High
34	File	xxxxxx/xxxxx/xx.x	predictive	High
35	File	xxx.xxx	predictive	Low
36	File	xxx-xxx/xxxxx.x	predictive	High
37	File	xxxxxx_xxxxxx_xxxxx_xxxx.xxx	predictive	High
38	File	xxxxxxxxxxxx.xxx	predictive	High
39	File	xxxxxxxxxx.xxx	predictive	High
40	File	xx/xxxxxx-xxxxx.x	predictive	High
41	File	xxxxxxx_xxx.xxx	predictive	High
42	File	xxx/xxxx/xx_xxxx.x	predictive	High
43	File	xxx/xxx/xxxxxxx.x	predictive	High
44	File	xxx/xxxx/xxxx.x	predictive	High
45	File	xxx/xxx/xxx_xxxx.x	predictive	High
46	File	xxx/xxx/xxx_xx.x	predictive	High
47	File	xxxxxxxxxx_xxxxxxxxx.xxx	predictive	High
48	File	xxxx.xxx	predictive	Medium
49	File	xxxx-xxxx.xx	predictive	Medium
50	File	xxxxxxxxxxxxxxxx.xxx	predictive	High
51	File	xxx/xx/xxx/xxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	High
52	File	xxx_xxxxx.x	predictive	Medium
53	File	xxxxx/xxxx/xxxx/xxxx.x	predictive	High
54	File	xxxxx/xxxxxx.x	predictive	High
55	File	xxxxxx.xxx	predictive	Medium
56	File	xxxxxxxxxxxxx.xxxx	predictive	High
57	Library	xxxxxx.xxx	predictive	Medium
58	Library	xxxxxx.xxx	predictive	Medium
59	Library	xxxxxxxxxxx.xxx	predictive	High
60	Library	xxxxxxxxx.xxx	predictive	High
61	Library	xxxxxxxxxxxxxx.xxx	predictive	High
62	Library	xxxxxxxx.xxx	predictive	Medium
63	Library	xxxx-xxxxxx.xxx	predictive	High
64	Argument	xxxxx_xxxxxx_xxxx	predictive	High
65	Argument	xxxx	predictive	Low
66	Argument	xxxx	predictive	Low
67	Argument	xxxx_xxxxx_xxx_xxxxx_xxxxxxxx	predictive	High
68	Argument	xxx_xxx_xxxxx_xxx_xx_xxxxx	predictive	High
69	Argument	xxxx_xxxx_xxxxxx_xxx_xxx_xxxxxxx	predictive	High
70	Argument	xxxx/xxxxxx	predictive	Medium
71	Argument	xxxxxxxxxxxxx	predictive	High
72	Argument	xxxxxxx__xxx	predictive	Medium
73	Argument	xxxxxxxxxxxxxx	predictive	High
74	Argument	xxx_xx_xxxxxx/xxx_xxx_xxxxxxxxxxx	predictive	High
75	Argument	xxx_xxx_xxx	predictive	Medium
76	Argument	xxxx_xxx_xxxx_xxxx	predictive	High
77	Argument	xxxxxx_xxx_xxxx_xxxx	predictive	High
78	Argument	xxxxxxxxxxxxxxxxx	predictive	High
79	Argument	xxxx-xxx-xxxxxxxxx	predictive	High
80	Argument	xxxxxxxx	predictive	Medium
81	Argument	xx_xxxx_xxxxxx_xx_xxxx	predictive	High
82	Argument	xxxxxx	predictive	Low
83	Argument	xxxx_xxxx	predictive	Medium
84	Argument	xxxxxxxxx_xxx	predictive	High
85	Argument	xxxxxxxxxxx_xxxxxxxx_x.x.x.x	predictive	High
86	Argument	xxxxxxxxxxxx	predictive	Medium
87	Argument	xxx	predictive	Low
88	Input Value	/../xxx/xxxxxxxx	predictive	High

◂ PreviousOverviewNext ▸

Might our Artificial Intelligence support you?

Check our Alexa App!