Magento-analytics Analisi

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (67)

Linguaggio

en	52
zh	12
pl	2
it	2

Nazione

us	40
cn	24
gb	4

Attori

magento-analytics	6
Cobalt Strike	2
FunnySwitch	1
Magecart	1
Emotet	1

Interesse

Genere

Not Defined	18
Forum Software	4
Network Management Software	2
Cloud Software	2
Web Server	2

Fornitore

Not Defined	12
HP	4
Oracle	4
Zoho ManageEngine	4
Zabbix	2

Prodotto

Zabbix Server	2
HP Print	2
HP Digital Sending	2
Oracle Graph Server and Client	2
Oracle Communications Policy Management	2

Vulnerabilità

#	Vulnerabilità	Base	Temp	0day	Oggi	Sfr	Con	EPSS	CTI	CVE
1	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash rivelazione di un 'informazione	5.3	5.2	$5k-$25k	$0-$5k	High	Workaround	0.02016	0.02	CVE-2007-1192
2	DZCP deV!L`z Clanportal config.php escalazione di privilegi	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	0.73	CVE-2010-0966
3	Wireless IP Camera WIFICAM ini File escalazione di privilegi	7.5	7.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00260	0.00	CVE-2017-8225
4	HP Color LaserJet Pro M280-M281 Multifunction Printer Embedded Web Server Reflected cross site scripting	5.2	5.2	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00058	0.00	CVE-2019-6323
5	HP DeskJet 3630 cross site request forgery	6.2	6.2	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00053	0.00	CVE-2019-6319
6	HP Print/Digital Sending Link-Local Multicast Name Resolution buffer overflow	6.3	6.3	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00376	0.06	CVE-2021-3942
7	HP inkjet/LaserJet Pro/PageWide Pro Privilege Escalation	8.0	8.0	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00385	0.02	CVE-2022-28721
8	Oracle HTTP Server SSL Module buffer overflow	9.8	9.6	$100k et plus	$5k-$25k	Not Defined	Official Fix	0.15087	0.00	CVE-2022-23943
9	Zoho ManageEngine Desktop Central ZIP Archive autenticazione debole	6.3	6.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00299	0.00	CVE-2021-44757
10	Zoho ManageEngine ServiceDesk Plus MSP web.xml directory traversal	6.5	6.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.01596	0.00	CVE-2022-32551
11	SUSE Rancher escalazione di privilegi	7.5	7.5	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00096	0.04	CVE-2022-31247
12	Rabbitmq Docker Image autenticazione debole	9.8	9.8	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00661	0.03	CVE-2020-35196
13	JetBrains IntelliJ IDEA Privilege Escalation	6.3	6.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00221	0.04	CVE-2021-45977
14	Oracle Communications Policy Management CMP escalazione di privilegi	9.8	9.6	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.97493	0.00	CVE-2022-22965
15	Microsoft Windows Hyper-V Privilege Escalation	8.0	7.3	$100k et plus	$5k-$25k	Unproven	Official Fix	0.00134	0.02	CVE-2022-24537
16	Watchguard Firebox/XTM Remote Code Execution	6.3	6.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.84170	0.03	CVE-2022-26318
17	node-ipc escalazione di privilegi	8.0	7.9	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00582	0.03	CVE-2022-23812
18	Cisco ASA SSL VPN escalazione di privilegi	6.2	6.1	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00109	0.02	CVE-2019-12677
19	Openfind Mail2000 Access Control escalazione di privilegi	6.0	6.0	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00087	0.02	CVE-2020-12776
20	Oracle Graph Server and Client Packaging/install issues Remote Code Execution	8.3	8.1	$25k-$100k	$0-$5k	Not Defined	Official Fix	0.01316	0.00	CVE-2021-2351

IOC - Indicator of Compromise (11)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	indirizzo IP	Hostname	Attore	Identified	Genere	Fiducia
1	1.125.125.5		Magento-analytics	09/05/2019	verified	Alto
2	45.76.75.35	45.76.75.35.vultrusercontent.com	magento-analytics	10/08/2022	verified	Alto
3	89.32.251.136	maildc1526907690.mihandns.com	magento-analytics	11/02/2022	verified	Alto
4	XX.XXX.XXX.XXX		Xxxxxxx-xxxxxxxxx	11/02/2022	verified	Alto
5	XX.XXX.XXX.XX	xx.xxx.xxx.xx.xxxxxxxxxxxxxxxx.xxx	Xxxxxxx-xxxxxxxxx	10/08/2022	verified	Alto
6	XX.XXX.XXX.XX	xx.xxx.xxx.xx.xxxxxxxxxxxxxxxx.xxx	Xxxxxxx-xxxxxxxxx	10/08/2022	verified	Alto
7	XXX.XXX.XXX.XXX	xxx.xxx.xxx.xxx.xxxxxxxxxxxxxxxx.xxx	Xxxxxxx-xxxxxxxxx	10/08/2022	verified	Alto
8	XXX.XX.XX.XXX	xxx.xx.xx.xxx.xxxxxxxxxxxxxxxx.xxx	Xxxxxxx-xxxxxxxxx	10/08/2022	verified	Alto
9	XXX.XXX.X.XX	xxx.xxx.x.xx.xxxxxxxxxxxxxxxx.xxx	Xxxxxxx-xxxxxxxxx	10/08/2022	verified	Alto
10	XXX.XXX.X.XXX	xxx.xxx.x.xxx.xxxxxxxxxxxxxxxx.xxx	Xxxxxxx-xxxxxxxxx	10/08/2022	verified	Alto
11	XXX.XXX.XXX.XXX	xxx.xxx.xxx.xxx.xxxxxxxxxxxxxxxx.xxx	Xxxxxxx-xxxxxxxxx	10/08/2022	verified	Alto

TTP - Tactics, Techniques, Procedures (12)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Classe	Vulnerabilità	Accesso al vettore	Genere	Fiducia
1	T1006	CAPEC-126	CWE-22	Path Traversal	predictive	Alto
2	T1059	CAPEC-242	CWE-94	Argument Injection	predictive	Alto
3	T1059.007	CAPEC-209	CWE-79, CWE-80	Cross Site Scripting	predictive	Alto
4	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	Alto
5	TXXXX.XXX	CAPEC-0	CWE-XXX	Xxx Xx Xxxx-xxxxx Xxxxxxxx	predictive	Alto
6	TXXXX	CAPEC-136	CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	Alto
7	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	Alto
8	TXXXX	CAPEC-0	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	predictive	Alto
9	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	Alto
10	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	Alto
11	TXXXX.XXX	CAPEC-133	CWE-XXX	Xxxxxxxx	predictive	Alto
12	TXXXX	CAPEC-116	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	Alto

IOA - Indicator of Attack (23)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Classe	Indicator	Genere	Fiducia
1	File	//	predictive	Basso
2	File	/interceptor/OutgoingChainInterceptor.java	predictive	Alto
3	File	/uncpath/	predictive	Media
4	File	/xx-xxxxx/xxxxx-xxxx.xxx	predictive	Alto
5	File	xxxxxxxxx.x	predictive	Media
6	File	xxxxxxx_xxx.xxx	predictive	Alto
7	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	Alto
8	File	xxxx.xxx	predictive	Media
9	File	xxx/xxxxxx.xxx	predictive	Alto
10	File	xxxxx.xxx	predictive	Media
11	File	xxxxx.xxxx	predictive	Media
12	File	xxxxxxxxxx.xxx	predictive	Alto
13	File	xxxxxxxx.xxx	predictive	Media
14	File	xxxxxx.xxx	predictive	Media
15	File	xxxxxx/xxx.xxx	predictive	Alto
16	Argument	xxxx	predictive	Basso
17	Argument	xxxxxxxx	predictive	Media
18	Argument	xxxxxxxxx-xxxxxxx/xxxxxxxxx/xxxxxxxxxx	predictive	Alto
19	Argument	xxxxxx_xx	predictive	Media
20	Argument	xxxxxxxx	predictive	Media
21	Argument	xx	predictive	Basso
22	Argument	xxxxxxxx	predictive	Media
23	Argument	xxx	predictive	Basso

Referenze (4)

The following list contains external sources which discuss the actor and the associated activities:

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Interested in the pricing of exploits?

See the underground prices here!