Tag: CVE-2025-24472

2 Attack Reports | 1 Vulnerabilities

Attack reports

Mass Scanning and Exploit Campaigns

Trustwave SpiderLabs has identified ongoing malicious activities originating from Proton66 ASN, including vulnerability scanning, exploit attempts, and phishing campaigns. The investigation revealed connections between Proton66 and bulletproof hosting services advertised on underground forums. Mass…
ransomware
vulnerability exploitation
CVE-2024-41713
CVE-2024-10914
CVE-2024-55591
CVE-2025-24472
CVE-2025-0108
superblack
bulletproof hosting
2025-05-16
exploit campaigns
critical vulnerabilities
mass scanning
underground forums
Published: May 16, 2025
Linked vulnerabilities : CVE-2024-41713 (CVSS 7.5), CVE-2024-10914 (CVSS 8.1), CVE-2024-55591 (CVSS 9.8), CVE-2025-24472 (CVSS 8.1), CVE-2025-0108 (CVSS 9.1)
Downloadable IOCs: 22

New Ransomware Operator Exploits Fortinet Vulnerability Duo

A new ransomware operator, dubbed Mora_001, has been exploiting Fortinet firewall vulnerabilities CVE-2024-55591 and CVE-2025-24472 to gain unauthorized access and deploy a modified version of LockBit ransomware. The threat actor creates persistent admin accounts, exfiltrates firewall configuration…
ransomware
lockbit
lateral movement
data exfiltration
fortinet
firewall
CVE-2024-55591
CVE-2025-24472
2025-03-14
superblack
wipeblack
Published: March 14, 2025
Downloadable IOCs: 23
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-24472

8.1
    FortiOS
    FortiProxy
Published: February 11, 2025
Click here to see more Vulnerabilities