Malwarecritical
AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-9841 | Unauthenticated Remote Code Execution in PHPUnit eval-stdin.php | 9.8 | 100% | KEV | KEV |
| CVE-2018-15133 | Deserialization RCE in Laravel Framework via X-XSRF-TOKEN Header | 8.1 | 77% | KEVPoC | KEV |
| CVE-2021-41773 | Path Traversal to RCE in Apache HTTP Server 2.4.49 | 9.8 | 100% | KEVRansomwarePoC ×6 | KEV |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan Mar 21, 2024 Threat Intelligence / Vulnerability Cybersecurity researchers have shed light on a tool referred to as AndroxGh0st that's used to target Laravel applications and steal sensitive data. "It works by scanning and taking out important information from . env files, revealing login details linked to AWS and Twilio," Juniper Threat Labs researcher Kashinath T Pattan said .
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.