SecuriTricks - godzilla

Ongoing exploitation of Cisco Catalyst SD-WAN vulnerabilities

Cisco Talos tracks active exploitation of CVE-2026-20182, an authentication bypass vulnerability in Cisco Catalyst SD-WAN Controller and Manager, allowing remote attackers to obtain administrative privileges. The exploitation is attributed to UAT-8616, a sophisticated threat actor previously involv…

xmrig

credential theft

cryptocurrency mining

authentication bypass

Published: May 14, 2026

Linked vulnerabilities : CVE-2025-20333 (CVSS 9.9), CVE-2025-20362 (CVSS 6.5), CVE-2026-20122 (CVSS 5.4), CVE-2026-20127 (CVSS 10.0), CVE-2026-20128 (CVSS 7.5), CVE-2026-20133 (CVSS 6.5), CVE-2026-20182 (CVSS 10.0)

Downloadable IOCs: 24

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

A China-aligned threat group designated SHADOW-EARTH-053 has been conducting cyberespionage operations against government entities and critical infrastructure across at least eight countries in South, East, and Southeast Asia, plus one NATO member state, since December 2024. The group exploits unpa…

exchange server compromise

godzilla webshell

noodlerat

proxylogon exploitation

Published: April 30, 2026

Linked vulnerabilities : CVE-2021-26855, CVE-2021-26858, CVE-2021-26857, CVE-2021-27065, CVE-2025-55182 (CVSS 10.0)

Downloadable IOCs: 44

An Investigation Into Years of Undetected Operations Targeting High-Value Sectors

Since 2020, a Chinese threat actor dubbed CL-UNK-1068 has been targeting high-value organizations across South, Southeast and East Asia, focusing on critical sectors like aviation, energy, government, and telecommunications. The group employs a diverse toolkit including custom malware, modified ope…

Published: March 6, 2026

Linked vulnerabilities : CVE-2023-34048, CVE-2021-4034, CVE-2026-0628 (CVSS 8.8)

Downloadable IOCs: 34

Tag: godzilla

Attack reports

Ongoing exploitation of Cisco Catalyst SD-WAN vulnerabilities

Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia

An Investigation Into Years of Undetected Operations Targeting High-Value Sectors

The Shadow Campaigns: Uncovering Global Espionage

The Espionage Toolkit: A Closer Look at its Advanced Techniques

Code injection attacks using publicly disclosed ASP.NET machine keys

Silent Intrusions: Godzilla Fileless Backdoors Targeting Atlassian Confluence

A Dive into Latest Campaign

Analysis of Coin Miner Attack Case Against Domestic Web Server