Tag: dictionary attack

3 Attack Reports | 0 Vulnerabilities

Attack reports

XiebroC2 Identified in MS-SQL Server Attack Cases

A recent attack on a poorly managed MS-SQL server involved the use of XiebroC2, an open-source C2 framework similar to CobaltStrike. The attackers exploited vulnerable credentials, installed JuicyPotato for privilege escalation, and then deployed XiebroC2 using PowerShell. XiebroC2 supports various…
coinminer
privilege escalation
brute force
c2 framework
ms-sql
dictionary attack
juicypotato
2025-10-01
xiebroc2
Published: October 1, 2025
Downloadable IOCs: 3

Attacks Targeting Linux SSH Servers to Install SVF DDoS Bot

A recent attack on poorly managed Linux servers has been identified, involving the installation of SVF Botnet, a DDoS Bot malware developed in Python. The malware uses Discord as its C&C server and employs multiple proxy servers for DDoS attacks. The threat actor gains access through weak SSH crede…
linux
ddos
discord
ssh
brute force
dictionary attack
proxy servers
2025-08-20
svf bot
svf botnet
Published: August 20, 2025
Downloadable IOCs: 0

Case of Attacks Targeting MS-SQL Servers to Install Ammyy Admin

A series of attacks targeting poorly managed MS-SQL servers have been identified, involving the installation of Ammyy Admin, a remote control tool. The attackers exploit vulnerable servers, execute commands to gather system information, and use WGet to install additional malware. The installed malw…
privilege escalation
brute force
2025-04-22
ms-sql
wget
remote control
petitpotato
dictionary attack
ammyy admin
Published: April 22, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports