Malwaremedium

WatchBog cryptomining botnet now uses Pastebin for C2

Security Affairsby @securityaffairsSep 13, 2019 · 18:04 UTC (Sep 13, 2019)3 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-1000861 CVE-2019-11581 CVE-2019-10149 CVE-2019-0192 CVE-2019-7238

Tags: cve-2018-1000861 cve-2019-11581 cve-2019-10149 cve-2019-0192 cve-2019-7238 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-1000861	Unauthenticated RCE in Jenkins Stapler Web Framework via Crafted URLs	9.8	98%	KEV	Dec 10, 2018 KEV Feb 10, 2022
CVE-2019-0192	In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request	9.8	78%		Mar 7, 2019
CVE-2019-10149	Unvalidated Email Recipient Enables Remote Command Execution in Exim MTA	9.8	100%	KEVPoC ×5	Jun 5, 2019 KEV Jan 10, 2022
CVE-2019-11581	Unauthenticated SSTI RCE in Atlassian Jira Server and Data Center	9.8	85%	KEV	Aug 9, 2019 KEV Mar 7, 2022
CVE-2019-7238	Incorrect Access Control in Sonatype Nexus Repository Manager before 3.15.0	9.8	77%	KEV	Mar 21, 2019 KEV Dec 10, 2021

From the original article

3 min read at securityaffairs.com

A new cryptocurrency-mining botnet tracked as WatchBog is heavily using the Pastebin service for command and control (C&C) operations. Cisco Talos researchers discovered a new cryptocurrency-mining botnet tracked as WatchBog is heavily using the Pastebin service for command and control.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.