3AM Analys

IOB - Indicator of Behavior (35)

Tidslinje

Lang

en32
zh2
ru2

Land

us34
nl2

Skådespelare

Aktiviteter

Intressera

Tidslinje

Typ

Säljare

Produkt

SolusVM2
OpenX2
GetSimpleCMS2
Samsung Memory Card & UFD Authentication Utility P ...2
Xitex Xitex WebContent M12

Sårbarheter

#SårbarhetBaseTemp0dayI dagUtnRemEPSSCTICVE
1LogicBoard CMS away.php Redirect6.36.1$0-$5k$0-$5kNot DefinedUnavailable0.000003.17
2Bitrix Site Manager redirect.php privilegier eskalering5.34.7$0-$5k$0-$5kUnprovenUnavailable0.001130.03CVE-2008-2052
3Serendipity exit.php privilegier eskalering6.36.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.48
4GetSimpleCMS index.php Redirect6.66.6$0-$5k$0-$5kNot DefinedNot Defined0.001230.00CVE-2019-9915
5FLDS redir.php sql injektion7.37.3$0-$5k$0-$5kHighUnavailable0.002030.34CVE-2008-5928
6Login and Logout Redirect Plugin3.53.4$0-$5k$0-$5kNot DefinedNot Defined0.000460.03CVE-2023-41648
7WPMU Forminator Plugin privilegier eskalering4.34.1$0-$5k$0-$5kNot DefinedOfficial Fix0.000450.86CVE-2024-28890
8Honeywell ProWatch privilegier eskalering7.57.4$0-$5k$0-$5kNot DefinedOfficial Fix0.000420.03CVE-2023-6179
9SolusVM WHMCS privilegier eskalering6.56.5$0-$5k$0-$5kNot DefinedNot Defined0.000640.05CVE-2022-42175
10Openads adclick.php Remote Code Execution7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.018710.72CVE-2007-2046
11MB connect line mymbCONNECT24/mbCONNECT24 redirect.php Redirect6.26.2$0-$5k$0-$5kNot DefinedOfficial Fix0.000840.04CVE-2020-35560
12WordPress AdServe adclick.php sql injektion7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.000730.08CVE-2008-0507
13Xitex Xitex WebContent M1 redirect.do cross site scripting4.34.2$0-$5k$0-$5kHighUnavailable0.001920.03CVE-2008-1209
14OpenX adclick.php Redirect5.34.7$0-$5k$0-$5kUnprovenUnavailable0.004400.91CVE-2014-2230
15Samsung Memory Card & UFD Authentication Utility PC Software svag autentisering7.67.4$0-$5k$0-$5kNot DefinedOfficial Fix0.000420.00CVE-2023-41929
16Crypto++ ECDSA Signature Generation FixedSizeAllocatorWithCleanup informationsgivning5.05.0$0-$5k$0-$5kNot DefinedOfficial Fix0.000460.00CVE-2022-48570
17AVM FRITZ!Box webcm privilegier eskalering7.37.1$0-$5k$0-$5kHighWorkaround0.957020.03CVE-2014-9727
18grunt Package load privilegier eskalering5.85.2$0-$5k$0-$5kNot DefinedOfficial Fix0.008510.07CVE-2020-7729
19Memcached process_bin_update minneskorruption9.08.9$0-$5k$0-$5kNot DefinedOfficial Fix0.867320.03CVE-2016-8705
20AVTECH IP Camera/NVR/DVR PwdGrp.cgi privilegier eskalering9.89.2$5k-$25k$0-$5kHighUnavailable0.000000.04

IOC - Indicator of Compromise (3)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP-adressHostnameSkådespelareKampanjerIdentifiedTypFörtroende
185.159.229.623AM11/10/2023verifiedHög
2XXX.XXX.X.XXXXxx11/10/2023verifiedHög
3XXX.XX.XXX.XXxx11/10/2023verifiedHög

TTP - Tactics, Techniques, Procedures (9)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (16)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlassIndicatorTypFörtroende
1File/cgi-bin/supervisor/PwdGrp.cgipredictiveHög
2File/forum/away.phppredictiveHög
3Fileadclick.phppredictiveMedium
4Filexxxxx/xxxxx.xxxpredictiveHög
5Filexxx-xxx/xxxxxpredictiveHög
6Filexxxx.xxxpredictiveMedium
7Filexxxxx.xxxpredictiveMedium
8Filexxxxxxxx.xxpredictiveMedium
9Filexxxxxxxx.xxxpredictiveMedium
10ArgumentxxxxpredictiveLåg
11ArgumentxxxxpredictiveLåg
12ArgumentxxpredictiveLåg
13ArgumentxxxxxxxxpredictiveMedium
14ArgumentxxxpredictiveLåg
15ArgumentxxxpredictiveLåg
16Argumentxxx:xxxxpredictiveMedium

Referenser (2)

The following list contains external sources which discuss the actor and the associated activities:

Might our Artificial Intelligence support you?

Check our Alexa App!