Malwarehigh
FreakOut botnet target 3 recent flaws to compromise Linux devices
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-28188 | Remote Command Execution (RCE) vulnerability in TerraMaster TOS <= 4.2.06 allow remote unauthenticated attackers to inject OS commands via /include/makecvs.php… | 9.8 | 96% | PoC ×2 | |
| CVE-2020-7961 | Deserialization RCE in Liferay Portal via JSON Web Services | 9.8 | 100% | KEVPoC | KEV |
| CVE-2021-3007 | Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execution if the content… | 9.8 | 75% | PoC ×2 |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | gxbrowser.net | n obfuscated Python script downloaded from the site https://gxbrowser[.]net consisting of polymorphic code. The FreakOut botnet has a |
From the original article
4 min read at securityaffairs.com
Security researchers uncovered a series of attacks conducted by the FreakOut botnet that leveraged recently discovered vulnerabilities. Security researchers from Check Point have uncovered a series of attacks associated with the FreakOut botnet that is targeting multiple unpatched flaws in applications running on top of Linux systems.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.