Tag: CVE-2023-20118

2 Attack Reports | 0 Vulnerabilities

Attack reports

ViciousTrap - Infiltrate, Control, Lure: Turning edge devices into honeypots en masse.

A threat actor nicknamed ViciousTrap has compromised over 5,500 edge devices, transforming them into honeypots. The actor targets more than 50 brands of SOHO routers, SSL VPNs, DVRs, and BMC controllers, possibly to collect exploited vulnerabilities. The infection chain involves exploiting CVE-2023…
gobrat
edge devices
soho routers
honeypot
CVE-2023-20118
2025-05-23
netghost
CVE-2021-32030
Published: May 23, 2025
Linked vulnerabilities : CVE-2023-20118, CVE-2021-32030
Downloadable IOCs: 15

PolarEdge: Unveiling an uncovered ORB network

An analysis of the PolarEdge backdoor and its associated botnet reveals a sophisticated cyber threat targeting various edge devices. The botnet exploits vulnerabilities in Cisco, Asus, QNAP, and Synology devices, using a TLS backdoor to establish control. Active since at least late 2023, PolarEdge …
botnet
vulnerability exploitation
asus
infrastructure analysis
edge devices
2025-02-25
qnap
cisco
polaredge
CVE-2023-20118
tls backdoor
synology
cipher_log
Published: February 25, 2025
Linked vulnerabilities : CVE-2023-20118
Downloadable IOCs: 31
Click here to see more Attack Reports