SecuriTricks - CVE-2022-1040

Attack reports

Mozi Resurfaces as Androxgh0st Botnet: Unraveling The Latest Exploitation Wave

The Androxgh0st botnet, active since January 2024, has evolved to incorporate Mozi botnet payloads, expanding its attack surface from web servers to IoT devices. It exploits vulnerabilities in various platforms, including Cisco ASA, Atlassian JIRA, and PHP frameworks, utilizing remote code executio…

iot

botnet

credential theft

CVE-2024-4577

vulnerability exploitation

CVE-2018-10562

CVE-2018-10561

androxgh0st

remote code execution

Published: November 12, 2024

Linked vulnerabilities : CVE-2024-4577 (CVSS 9.8), CVE-2021-41773, CVE-2018-15133, CVE-2017-9841, CVE-2022-1040, CVE-2021-41277, CVE-2018-10562, CVE-2014-2120, CVE-2021-26086, CVE-2024-36401, CVE-2022-21587, CVE-2018-10561, CVE-2023-1389

Downloadable IOCs: 10

AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services

The AndroxGh0st malware has expanded its capabilities by incorporating the Mozi botnet to target IoT devices and cloud services. This Python-based tool, known for attacking Laravel applications, now exploits a wider range of vulnerabilities in internet-facing applications. The malware uses remote c…

remote code execution

Published: November 8, 2024

Downloadable IOCs: 1

Pacific Rim timeline: Information for defenders from a braid of interlocking attack campaigns

Sophos unveils a five-year investigation tracking China-based threat actors targeting perimeter devices, particularly Sophos firewalls. The report details multiple attack campaigns, including Asnarök, Bookmark Buffer Overflow, and Covert Channels, which exploited zero-day vulnerabilities to gain ac…

sliver

gh0st rat

backdoors

critical infrastructure

china-based threat actors

CVE-2022-3236

asnarök

zero-day vulnerabilities

asia-pacific targets

CVE-2022-1292

Published: October 31, 2024

Downloadable IOCs: 0

Click here to see more Attack Reports

Tag: CVE-2022-1040

Attack reports

Mozi Resurfaces as Androxgh0st Botnet: Unraveling The Latest Exploitation Wave

AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services

Pacific Rim timeline: Information for defenders from a braid of interlocking attack campaigns