Malwaremedium

WatchDog botnet targets Windows and Linux servers

Security Affairsby @securityaffairsFeb 18, 2021 · 17:10 UTC (Feb 18, 2021)2 min read3 · 2 reads

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2015-1427 CVE-2014-3120 CVE-2018-1273 CVE-2017-10271

Tags: cve-2015-1427 cve-2014-3120 cve-2018-1273 cve-2017-10271 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2014-3120	Remote Code Execution via Dynamic Scripting in Elasticsearch (CVE-2014-3120)	—	89%	KEV	— KEV Mar 25, 2022
CVE-2015-1427	Sandbox Bypass RCE in Elasticsearch Groovy Scripting Engine	—	100%	KEV	— KEV Mar 25, 2022
CVE-2017-10271	Unauthenticated Remote Code Execution in Oracle WebLogic Server	7.5	100%	KEVRansomwarePoC ×3	Oct 19, 2017 KEV Feb 10, 2022
CVE-2018-1273	Unauthenticated RCE in VMware Tanzu Spring Data Commons	9.8	97%	KEVRansomware	Apr 11, 2018 KEV Mar 25, 2022

From the original article

2 min read at securityaffairs.com

PaloAlto Network warns of the WatchDog botnet that uses exploits to take over Windows and Linux servers and mine cryptocurrency. Security researchers at Palo Alto Networks uncovered a cryptojacking botnet, tracked as WatchDog, that is targeting Windows and Linux systems.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.