FBot Análisis

IOB - Indicator of Behavior (18)

Cronología

Idioma

en16
es2

País

Actores

Ocupaciones

Interesar

Cronología

Escribe

Proveedor

Producto

Apache HTTP Server2
SMC Networks D3G0804W2
Huawei Anne-AL002
Huawei Berkeley-L092
Huawei CD16-102

Vulnerabilidad

#VulnerabilidadBaseTemp0dayHoyExpConEPSSCTICVE
1TypeStack class-validator validate sql injection6.96.9$0-$5k$0-$5kNot DefinedNot Defined0.001630.02CVE-2019-18413
2Google Chrome WebView Remote Code Execution6.36.0$25k-$100k$5k-$25kNot DefinedOfficial Fix0.001070.00CVE-2021-37990
3Mozilla Firefox/Firefox ESR/Thunderbird IonMonkey JIT Compiler desbordamiento de búfer8.07.9$5k-$25k$0-$5kNot DefinedOfficial Fix0.090650.03CVE-2019-9792
4Fortinet FortiOS/FortiProxy Proxy Mode Remote Code Execution9.88.7$25k-$100k$5k-$25kUnprovenOfficial Fix0.002330.07CVE-2023-33308
5Cisco NX-OS NX-API escalada de privilegios7.87.7$5k-$25k$0-$5kNot DefinedOfficial Fix0.000420.03CVE-2019-1605
6PHPList Subscription sql injection7.57.3$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.001520.04CVE-2017-20032
7PHPList Edit Subscription index.php sql injection7.97.7$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.001520.08CVE-2017-20029
8Huawei TC5200-16 divulgación de información5.45.1$5k-$25k$0-$5kNot DefinedOfficial Fix0.000700.02CVE-2020-9069
9Microsoft Exchange Server Outlook Web Access vulnerabilidad desconocida4.84.6$5k-$25k$0-$5kNot DefinedOfficial Fix0.001020.00CVE-2019-0817
10Microsoft Exchange Server Outlook Web Access escalada de privilegios7.26.8$25k-$100k$0-$5kNot DefinedOfficial Fix0.003270.00CVE-2017-11932
11Microsoft Office Common Controls TabStrip ActiveX MSCOMCTL.OCX escalada de privilegios9.68.6$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.937960.02CVE-2012-1856
12AuYou Wireless Smart Outlet Socket Remote Control Straisand autenticación débil6.35.8$5k-$25k$0-$5kProof-of-ConceptWorkaround0.000000.00
13SMC Networks D3G0804W Network Diagnostic Tools formSetDiagnosticToolsFmPing escalada de privilegios8.58.5$0-$5k$0-$5kNot DefinedNot Defined0.012240.00CVE-2020-8087
14Apache HTTP Server ap_get_basic_auth_pw autenticación débil8.58.4$5k-$25k$0-$5kNot DefinedOfficial Fix0.013990.04CVE-2017-3167
15WordPress Press This class-wp-press-this.php divulgación de información6.36.2$5k-$25k$0-$5kNot DefinedOfficial Fix0.005270.02CVE-2017-5610
16Xlightftpd Xlight FTP Server directory traversal6.36.0$0-$5k$0-$5kNot DefinedOfficial Fix0.004070.02CVE-2010-2695

IOC - Indicator of Compromise (2)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDdirección IPHostnameActorCampañasIdentifiedEscribeConfianza
189.248.174.219FBot2022-02-11verifiedAlto
2XXX.XX.XXX.XXxx.xxxxxx.xxxxXxxx2022-02-11verifiedAlto

TTP - Tactics, Techniques, Procedures (5)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueVulnerabilidadVector de accesoEscribeConfianza
1T1006CWE-22Path TraversalpredictiveAlto
2TXXXXCWE-XXXxxxxxxx XxxxxxxxxpredictiveAlto
3TXXXXCWE-XXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx XxxxxxxxxpredictiveAlto
4TXXXXCWE-XXXxx XxxxxxxxxpredictiveAlto
5TXXXXCWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveAlto

IOA - Indicator of Attack (7)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClaseIndicatorEscribeConfianza
1File/lists/index.phppredictiveAlto
2Filegoform/formSetDiagnosticToolsFmPingpredictiveAlto
3Filexxxxxxxx.xxxpredictiveMedio
4Filexx-xxxxx/xxxxxxxx/xxxxx-xx-xxxxx-xxxx.xxxpredictiveAlto
5ArgumentxxxxxxxxxxxxxxxxxxxpredictiveAlto
6Argumentxxx_xxxxxxxxxx_xxxxx__xxxx_xxxxxxxpredictiveAlto
7Network Portxx xxxxxxx xxx.xx.xx.xxpredictiveAlto

Referencias (3)

The following list contains external sources which discuss the actor and the associated activities:

Interested in the pricing of exploits?

See the underground prices here!