SpyBanker Analys

IOB - Indicator of Behavior (30)

Tidslinje

Lang

en24
de4
ru2

Land

ru14
us12

Skådespelare

Aktiviteter

Intressera

Tidslinje

Typ

Säljare

Produkt

CKeditor42
Oracle Siebel CRM2
yiisoft yii2
nginx2
Yii Yii22

Sårbarheter

#SårbarhetBaseTemp0dayI dagUtnRemEPSSCTICVE
1AWStats Config awstats.pl cross site scripting4.34.1$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.005870.05CVE-2006-3681
2Citrix NetScaler ADC/NetScaler Gateway OpenID openid-configuration ns_aaa_oauthrp_send_openid_config CitrixBleed minneskorruption8.38.2$25k-$100k$0-$5kHighOfficial Fix0.968690.05CVE-2023-4966
3CKFinder Documentation Content Sniffing informationsgivning6.36.3$0-$5k$0-$5kNot DefinedNot Defined0.000840.04CVE-2019-15891
4CKFinder File Name privilegier eskalering7.47.4$0-$5k$0-$5kNot DefinedNot Defined0.001550.09CVE-2019-15862
5yiisoft yii unserialize privilegier eskalering7.87.8$0-$5k$0-$5kNot DefinedOfficial Fix0.003780.04CVE-2023-47130
6Moment.js kataloggenomgång6.96.7$0-$5k$0-$5kNot DefinedOfficial Fix0.003300.05CVE-2022-24785
7DZCP deV!L`z Clanportal config.php privilegier eskalering7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.009431.23CVE-2010-0966
8Oracle Siebel CRM UI Framework cross site scripting6.15.9$5k-$25k$0-$5kNot DefinedOfficial Fix0.002220.02CVE-2022-31160
9CKeditor4 cross site scripting5.25.1$0-$5k$0-$5kNot DefinedOfficial Fix0.000520.04CVE-2024-24816
10Yii Yii2 kataloggenomgång7.67.5$0-$5k$0-$5kNot DefinedOfficial Fix0.000910.00CVE-2015-5467
11nginx privilegier eskalering6.96.9$0-$5k$0-$5kNot DefinedNot Defined0.002413.84CVE-2020-12440
12Yii Yii2 Gii cross site scripting4.44.4$0-$5k$0-$5kNot DefinedNot Defined0.000560.03CVE-2022-34297
13BusyBox xfuncs_printf.c xasprintf minneskorruption5.55.5$0-$5k$0-$5kNot DefinedNot Defined0.000440.00CVE-2023-42363
14OpenX adclick.php Redirect5.34.7$0-$5k$0-$5kUnprovenUnavailable0.004400.95CVE-2014-2230
15EMSigner privilegier eskalering6.46.4$0-$5k$0-$5kNot DefinedNot Defined0.000490.00CVE-2023-43900
16SmartWeb Infotech Job Board My Profile Page account privilegier eskalering7.57.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.000910.04CVE-2023-3504
17FreeBSD Ping pr_pack minneskorruption7.37.0$5k-$25k$0-$5kNot DefinedOfficial Fix0.000430.00CVE-2022-23093

IOC - Indicator of Compromise (4)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP-adressHostnameSkådespelareKampanjerIdentifiedTypFörtroende
179.137.205.212Zugzwangwork9.aeza.networkSpyBanker28/01/2024verifiedHög
2XX.XX.XXX.XXXxxxxxxxx23/09/2023verifiedHög
3XXX.XXX.XX.XXXxxxxxxxx22/01/2024verifiedHög
4XXX.XXX.XX.XXXxxx.xxxxx.xxXxxxxxxxx25/01/2024verifiedHög

TTP - Tactics, Techniques, Procedures (7)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (13)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlassIndicatorTypFörtroende
1File/oauth/idp/.well-known/openid-configurationpredictiveHög
2File/settings/accountpredictiveHög
3Filexxxxxxx.xxxpredictiveMedium
4Filexxxxxxx.xxpredictiveMedium
5Filexxx/xxxxxx.xxxpredictiveHög
6Filexxxxxx_xxxxxx.xpredictiveHög
7ArgumentxxxpredictiveLåg
8ArgumentxxxxxxxxpredictiveMedium
9ArgumentxxxxxxpredictiveLåg
10ArgumentxxxxpredictiveLåg
11Argumentxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxpredictiveHög
12ArgumentxxxxxxxxpredictiveMedium
13ArgumentxxxxpredictiveLåg

Referenser (4)

The following list contains external sources which discuss the actor and the associated activities:

Want to stay up to date on a daily basis?

Enable the mail alert feature now!