Tag: iis web server

2 Attack Reports | 0 Vulnerabilities

Attack reports

Trial, Error, and Typos: Why Some Malware Attacks Aren't as 'Sophisticated' as You Think

This analysis challenges the notion that cyber threat actors are always sophisticated and organized. Through examining three incidents, it reveals that attackers often make mistakes, face obstacles, and adapt their tactics based on trial and error. The incidents showcase how threat actors struggled…
sparkrat
persistence techniques
iis web server
warlock
2025-12-23
malware deployment
shellcoderunner
Published: December 23, 2025
Downloadable IOCs: 10

Trimble Cityworks: CVE-2025-0994: Active Exploitation

A high-severity deserialization vulnerability in Trimble Cityworks, CVE-2025-0994, affects versions before 15.8.9 and Office Companion versions before 23.10. This flaw allows authenticated attackers to execute remote code on Microsoft IIS web servers. Exploitation indicators suggest the use of Rust…
cobalt strike
remote code execution
critical infrastructure
CVE-2025-0994
2025-02-20
vshell
trimble cityworks
iis web server
deserialization vulnerability
Published: February 20, 2025
Linked vulnerabilities : CVE-2025-0994 (CVSS 8.8)
Downloadable IOCs: 16
Click here to see more Attack Reports