Vulnerabilityhigh

Chinese-speaking cybercrime gang Rocke changes tactics

Security Affairsby @securityaffairsOct 16, 2019 · 06:55 UTC (Oct 16, 2019)2 min read2 · 2 reads

Read at securityaffairs.com

Analyze CVE-2019-3396 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2019-3396 CVE-2016-3088

Tags: cve-2019-3396 cve-2016-3088 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2016-3088	Unauthenticated Arbitrary File Upload Leading to RCE in Apache ActiveMQ Fileserver	9.8	98%	KEVPoC	Jun 1, 2016 KEV Feb 10, 2022
CVE-2019-3396	Server-Side Template Injection RCE in Atlassian Confluence Server and Data Center	9.8	100%	KEVRansomwarePoC ×4	Mar 25, 2019 KEV Nov 3, 2021

From the original article

2 min read at securityaffairs.com

Chinese-speaking cybercrime gang Rocke that carried out several large-scale cryptomining campaigns, has now using news tactics to evade detection. Chinese-speaking cybercrime gang Rocke, that carried out several large-scale cryptomining campaigns in past, has now using news tactics to evade detection.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.