File names, Honeypots and Mining - Information Management Today

Multiple threat actors exploit PHP flaw CVE-2024-4577 to deliver malware

Security Affairs

JULY 11, 2024

. “Threat actors continued the speedy-time-from-disclosure-to-exploitation trend and were quick to leverage this new vulnerability — we observed exploit attempts targeting this PHP flaw on our honeypot network within 24 hours of its disclosure.” The script also cleans up the temporary files for obfuscation.

Honeypots

Honeypots File names Mining IoT

Multiple threat actors are targeting Elasticsearch Clusters

Security Affairs

FEBRUARY 27, 2019

Cisco Talos experts have reported a spike in the attacks that leverage known flaws to compromise unsecured Elasticsearch clusters and use them to mine crypto-currencies. “Through ongoing analysis of honeypot traffic, Talos detected an increase in attacks targeting unsecured Elasticsearch clusters. .”

Search queries

Search queries Honeypots File names Mining

Outlaw is Back, a New Crypto-Botnet Targets European Organizations

Security Affairs

APRIL 28, 2020

This directory contains the crypto mining module named kswapd0. In this folder, the first one to be executed is the file “a”. The script looks like the following: Figure 5: Content of the “a” file. The executed crypto miner is the file named “” kswapd0 ” based on the famous XMRIG monero crypto miner.

Mining

Mining File names Honeypots IT

Information Management Today

Multiple threat actors exploit PHP flaw CVE-2024-4577 to deliver malware

Multiple threat actors are targeting Elasticsearch Clusters

Outlaw is Back, a New Crypto-Botnet Targets European Organizations

Webinars

Stay Connected