Tag: CVE-2017-0144

3 Attack Reports | 0 Vulnerabilities

Attack reports

LemonDuck Unleashes Cryptomining Attacks Through SMB Service Exploits

This report details the tactics and techniques employed by the LemonDuck cryptomining malware, which exploits the SMB service by leveraging the EternalBlue vulnerability (CVE-2017-0144). After gaining initial access through brute-force attacks, the malware creates malicious files, disables security…

malicious scripts

credential theft

network manipulation

Published: October 14, 2024

Downloadable IOCs: 8

LemonDuck Malware Exploiting SMB Vulnerabilities

LemonDuck malware has evolved into a versatile threat, targeting both Windows and Linux systems. It exploits SMB vulnerabilities, particularly EternalBlue, to gain network access. The malware uses brute-force attacks, creates hidden administrative shares, and executes malicious actions via batch fi…

Published: October 9, 2024

Downloadable IOCs: 5

StopRansomware: RansomHub Ransomware

RansomHub is a ransomware-as-a-service variant that has targeted over 210 victims across various critical infrastructure sectors since February 2024. It employs a double-extortion model, encrypting systems and exfiltrating data. The ransom note provides victims with a client ID and instructions to …

privilege-escalation

ransomware-as-a-service

double-extortion

data-exfiltration

critical-infrastructure

lateral-movement

Published: August 30, 2024

Downloadable IOCs: 14

Click here to see more Attack Reports