Coronavirus scams Análise

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (93)

Idioma

en	60
fr	26
zh	4
de	2
ru	2

País

us	38
fr	36
cn	4
gb	4
de	2

Actores

Coronavirus scams	2
ArcaneDoor	1

Interesse

Tipo

Not Defined	38
Web Server	8
Operating System	8
Content Management System	6
Programming Tool Software	2

Fabricante

Not Defined	28
Microsoft	10
Apache	6
SourceCodester	4
Voltronic Power	2

Produto

Microsoft Windows	6
Apache HTTP Server	4
WordPress	4
Apache Struts	2
PY-Membres	2

Vulnerabilidades

#	Vulnerabilidade	Base	Temp	0day	Hoje	Exp	Mas	EPSS	CTI	CVE
1	Collabora Online Roteiro Cruzado de Sítios	4.9	4.8	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00052	0.00	CVE-2023-31145
2	Insyde InsydeH2O UEFI DXE Driver Excesso de tampão	6.7	6.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00062	0.00	CVE-2021-42059
3	nginx direitos alargados	6.9	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00241	1.55	CVE-2020-12440
4	OpenSSH Authentication Username Divulgação de Informação	5.3	4.8	$5k-$25k	$0-$5k	High	Official Fix	0.10737	0.20	CVE-2016-6210
5	Voltronic Power ViewPower Pro getMacAddressByIp direitos alargados	9.8	9.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00070	0.05	CVE-2023-51572
6	Microsoft Outlook Remote Code Execution	8.0	7.3	$5k-$25k	$0-$5k	Unproven	Official Fix	0.13359	0.05	CVE-2023-33131
7	Microsoft Excel Local Privilege Escalation	7.0	6.4	$0-$5k	$0-$5k	Unproven	Official Fix	0.00298	0.05	CVE-2023-33137
8	LogicBoard CMS away.php Redirect	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Unavailable	0.00000	4.06
9	SourceCodester Life Insurance Management System POST Parameter insertNominee.php Roteiro Cruzado de Sítios	4.4	4.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00062	0.08	CVE-2023-3165
10	Apple iOS/iPadOS IOMobileFrameBuffer Excesso de tampão	7.8	7.5	$25k-$100k	$5k-$25k	High	Official Fix	0.00236	0.00	CVE-2021-30883
11	GNU wget FTP Directório Traversal	5.1	4.9	$0-$5k	$0-$5k	High	Official Fix	0.07815	0.04	CVE-2014-4877
12	Fortinet FortiOS/FortiProxy FortiGate SSL-VPN Excesso de tampão	9.8	9.6	$25k-$100k	$25k-$100k	High	Official Fix	0.15407	0.05	CVE-2023-27997
13	SunHater KCFinder upload.php Roteiro Cruzado de Sítios	5.7	5.7	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00131	0.04	CVE-2019-14315
14	Grafana Email Invite direitos alargados	6.5	6.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00156	0.00	CVE-2022-39306
15	Linux Kernel IGB Driver igb_main.c igb_set_rx_buffer_len Excesso de tampão	7.6	7.5	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00050	0.04	CVE-2023-45871
16	Kubernetes ingress-nginx API direitos alargados	7.6	7.5	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00237	0.04	CVE-2023-5043
17	Microsoft Exchange Server Privilege Escalation	8.3	7.6	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.00080	0.04	CVE-2023-36745
18	Web Based Quiz System welcome.php Injecção SQL	6.3	6.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00088	0.00	CVE-2022-32991
19	Harbor Fraca autenticação	6.9	6.8	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02074	0.04	CVE-2022-46463
20	Exim AUTH Excesso de tampão	9.8	9.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00075	0.04	CVE-2023-42115

IOC - Indicator of Compromise (4)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	Endereço IP	Hostname	Actor	Identified	Tipo	Aceitação
1	6.43.51.17		Coronavirus scams	05/04/2020	verified	Alto
2	XX.XXX.XXX.XX		Xxxxxxxxxxx Xxxxx	07/03/2020	verified	Alto
3	XXX.XX.XX.XXX	xxxxxx.xxx.xx.xx.xxx.xxxxxxx.xxxx-xxxxxx.xx	Xxxxxxxxxxx Xxxxx	05/04/2020	verified	Alto
4	XXX.XXX.X.XXX		Xxxxxxxxxxx Xxxxx	07/03/2020	verified	Alto

TTP - Tactics, Techniques, Procedures (11)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Classificação	Vulnerabilidades	Tipo de acesso	Tipo	Aceitação
1	T1006	CAPEC-126	CWE-21, CWE-22	Path Traversal	predictive	Alto
2	T1059	CAPEC-242	CWE-94	Argument Injection	predictive	Alto
3	T1059.007	CAPEC-209	CWE-79	Cross Site Scripting	predictive	Alto
4	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	Alto
5	TXXXX.XXX	CAPEC-16	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	Alto
6	TXXXX	CAPEC-136	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	Alto
7	TXXXX.XXX	CAPEC-178	CWE-XXX	Xxxx Xxxxxxxx	predictive	Alto
8	TXXXX	CAPEC-108	CWE-XX, CWE-XX	Xxx Xxxxxxxxx	predictive	Alto
9	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	Alto
10	TXXXX	CAPEC-102	CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	Alto
11	TXXXX	CAPEC-116	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	Alto

IOA - Indicator of Attack (47)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Classe	Indicator	Tipo	Aceitação
1	File	.htaccess	predictive	Médio
2	File	/adminlogin.asp	predictive	Alto
3	File	/api/baskets/{name}	predictive	Alto
4	File	/calendar/minimizer/index.php	predictive	Alto
5	File	/forum/away.php	predictive	Alto
6	File	/uncpath/	predictive	Médio
7	File	/xx-xxxx/xxxxxx/x.x/xxxxx?xxx	predictive	Alto
8	File	xxxxxxx.xxx	predictive	Médio
9	File	xxx_xxxxx.xxx	predictive	Alto
10	File	xxx.xxx?xxx=xxxxx_xxxx	predictive	Alto
11	File	xxxxxxx/xxx/xxxxxxxx/xxxxx/xxx/xxx_xxxx.x	predictive	Alto
12	File	xxxx_xxxx.xxx	predictive	Alto
13	File	xx/xx_xxxxx.x	predictive	Alto
14	File	xxxx.xxx	predictive	Médio
15	File	xxx/xxxxxx.xxx	predictive	Alto
16	File	xxxxxxxxxxxxx.xxx	predictive	Alto
17	File	xxxxxxxxxxx/xxx.x	predictive	Alto
18	File	xxxxx_xxxxxx.xxx	predictive	Alto
19	File	xxxxxxxxxx_xxxxx.xxxxxx	predictive	Alto
20	File	xxx/xxx_xxx	predictive	Médio
21	File	xxxxxx.xxx	predictive	Médio
22	File	xxx/xxxxxxxx/xxx_xxx.x	predictive	Alto
23	File	xxx/xxxxx_xxxxx/xx_xxxxxxx.x	predictive	Alto
24	File	xxxxxx.xxx	predictive	Médio
25	File	xxxxxxx.xxx	predictive	Médio
26	File	xx-xxxxx-xxxxxx.xxx	predictive	Alto
27	File	xx-xxxxxxxx/xxxx.xxx	predictive	Alto
28	Argument	xxxxxxx	predictive	Baixo
29	Argument	xxxxxx_xxxx	predictive	Médio
30	Argument	xxxxxxxx	predictive	Médio
31	Argument	xxxxx_xxxx	predictive	Médio
32	Argument	xxxxxxxxxxxxxxx	predictive	Alto
33	Argument	xxxxxxxxxxx	predictive	Médio
34	Argument	xxxx/xxxx	predictive	Médio
35	Argument	xxxx	predictive	Baixo
36	Argument	xxx	predictive	Baixo
37	Argument	xx	predictive	Baixo
38	Argument	xxxxxxx_xx	predictive	Médio
39	Argument	xxxxxxxx	predictive	Médio
40	Argument	xxxxxxxx	predictive	Médio
41	Argument	xxxxxx_xx	predictive	Médio
42	Argument	xxx	predictive	Baixo
43	Argument	xxxxxxxx/xxxxxxxx	predictive	Alto
44	Argument	_xxxxxxx_xxxx	predictive	Alto
45	Input Value	'xx''='	predictive	Baixo
46	Input Value	..	predictive	Baixo
47	Pattern	\|xx xx\|	predictive	Baixo

Referências (3)

The following list contains external sources which discuss the actor and the associated activities:

◂ VoltarVisão GeralPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!