Malwaremedium

Cryptomining Campaign involves Golang malware to target Linux servers

Security Affairsby @securityaffairsJul 5, 2019 · 19:27 UTC (Jul 5, 2019)3 min read4 · 2 reads

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2019-9082 CVE-2019-3396 CVE-2018-7600

Tags: cve-2019-9082 cve-2019-3396 cve-2018-7600 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-7600	Unauthenticated Remote Code Execution in Drupal Core (Drupalgeddon 2)	9.8	100%	KEVRansomwarePoC ×4	Mar 29, 2018 KEV Nov 3, 2021
CVE-2019-3396	Server-Side Template Injection RCE in Atlassian Confluence Server and Data Center	9.8	100%	KEVRansomwarePoC ×4	Mar 25, 2019 KEV Nov 3, 2021
CVE-2019-9082	Unauthenticated RCE in ThinkPHP < 3.2.4 (Open Source BMS, ZzzCMS zzzphp)	8.8	97%	KEVPoC ×3	Feb 24, 2019 KEV Nov 3, 2021

From the original article

3 min read at securityaffairs.com

Experts at F5 Networks discovered a cryptomining campaign that is delivering a new piece of the Golang malware that targets Linux-based servers. F5 experts uncovered a cryptominer campaign that is delivering a new strain of Golang malware that targets Linux-based servers. The campaign began around June 10 and already infected several thousand machines.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.