Malwarehigh

FBI, CISA warn of AndroxGh0st botnet for victim identification and exploitation

Security Affairsby @securityaffairsJan 17, 2024 · 12:10 UTC (Jan 17, 2024)1 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2017-9841 CVE-2021-41773 CVE-2018-15133

Tags: cve-2017-9841 cve-2021-41773 cve-2018-15133 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-9841	Unauthenticated Remote Code Execution in PHPUnit eval-stdin.php	9.8	100%	KEV	Jun 27, 2017 KEV Feb 15, 2022
CVE-2018-15133	Deserialization RCE in Laravel Framework via X-XSRF-TOKEN Header	8.1	77%	KEVPoC	Aug 9, 2018 KEV Jan 16, 2024
CVE-2021-41773	Path Traversal to RCE in Apache HTTP Server 2.4.49	9.8	100%	KEVRansomwarePoC ×6	Oct 5, 2021 KEV Nov 3, 2021

From the original article

1 min read at securityaffairs.com

U. S. CISA and the FBI warned of AndroxGh0st malware used to create a botnet for victim identification and exploitation in target networks.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.