Tag: activemq

2 Attack Reports | 0 Vulnerabilities

Attack reports

The Return of the Kinsing

A Canary Intelligence team analysis revealed the resurgence of the Kinsing malware, exploiting three CVEs: CVE-2023-46604 (ActiveMQ), CVE-2023-38646 (Metabase), and CVE-2025-55182 (React2Shell). The attacks, originating from IP 212.113.98.30, converged on a shared staging host at 78.153.140.16. The…
linux
go
CVE-2023-46604
CVE-2023-38646
activemq
CVE-2025-55182
react2shell
2026-03-26
kinsing
metabase
Published: March 26, 2026
Downloadable IOCs: 5

Case of ActiveMQ Vulnerability Exploitation to Install Sharpire (Kinsing)

The Kinsing threat actor continues to distribute malware by exploiting known vulnerabilities, particularly CVE-2023-46604 in ActiveMQ. They target both Linux and Windows systems, using various malware types including XMRig, Stager, and Sharpire. The attack process involves exploiting the ActiveMQ v…
xmrig
meterpreter
cobaltstrike
vulnerability exploitation
CVE-2023-46604
cryptocurrency mining
2025-10-31
activemq
sharpire
h2miner
powershell empire
Published: October 31, 2025
Linked vulnerabilities : CVE-2021-44228, CVE-2023-46604
Downloadable IOCs: 4
Click here to see more Attack Reports