SecuriTricks

Attack Reports

Title	Published	Tags	Description	Number of indicators
DragonRank, a Chinese-speaking SEO manipulator service provider	Sept. 12, 2024, 9:27 p.m.	plugx black mimikatz badpotato metasploit 2024-09-12 illusion dragonrank plugx loader badiis malware c cd	Cisco Talos is disclosing a new threat called “DragonRank” that primarily targets countries in Asia and a few in Europe, operatin…	35
Earth Preta Evolves its Attacks with New Malware and Strategies	Sept. 10, 2024, 8:58 p.m.	malware plugx persistence execution find 2024-09-10 winrar earth preta pubload trojanspy indonesia hiupan pullbait fdmtp c plugx c pubload c preta fdmtp	Trend Micros discusses analysis of Earth Preta’s enhancements in their attacks by introducing new tools, malware variants and str…	41
Attack Case against HFS (HTTP File Server) Server (Suspected CVE-2024-23692)	July 3, 2024, 11:39 a.m.	backdoor exploit rat xmrig vulnerability plugx gh0strat CVE-2024-23692 cobaltstrike korplug destroyrat xenorat 2024-07-03 gothief	A remote code execution vulnerability (CVE-2024-23692) in the HFS (HTTP File Server) program has allowed attackers to execute mal…	14
China-Nexus Threat Group ‘Velvet Ant’ Abuses F5 Load Balancers for Persistence	June 18, 2024, 9:10 p.m.	python plugx lsass trojan 2024-06-18 sygnia c server shadowpad wmiexec virustotal earthworm impacket f5 bigip command f5 appliance svchost velvet ant wireshark guard protect		5
Operation ControlPlug: Targeted attack campaign using MSC files	June 6, 2024, 2:55 p.m.	malware stealthy apt plugx campaign 2024-06-06 korplug kaba tvt destroyrat thoper sogu	An investigation revealed that the threat group DarkPeony, also known as Operation ControlPlug, employed a novel technique involv…	14
Mallox ranomware affiliate leverages PureCrypter in MS-SQL exploitation campaigns	May 14, 2024, 6:03 p.m.	powershell plugx ransom mallox purecrypter 2024-05-09 2024-05-14 bitcoin trigona mssql mssql server maestro as208091 mallox raas unsafe shutdown clr sqlshell sqlshell xollam link http 2024-05-10	A team from security firm Sekoia has observed a series of attacks targeting vulnerable assets, including MS-SQL, and Mallox ranso…	10

» Click here to see all Attack Reports «

Tag : plugx